Privacy Policy
Last Updated: April 2026
1. Who We Are
ICB UK (International Certificate Bureau) is the data controller for personal data collected via this website and through our certification and training services. Contact us at info@icb-uk.biz for any data-related queries.
2. What Personal Data We Collect
We collect the following categories of personal data:
- Contact & Enquiry Data: name, email address, phone number, company name, message content
- Certification Data: company registration details, management system scope, audit findings
- Training Data: delegate name, email address, employer details, course completion records
- Website Usage Data: pages visited, browser type, device type (anonymised via analytics)
- Cookie Data: session preferences and consent records
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries | Legitimate Interest |
| Delivering certification services | Contract |
| Delivering training courses | Contract |
| Sending renewal reminders | Contract |
| Improving our website | Legitimate Interest |
| Accreditation body reporting (UKAB) | Legal Obligation |
We do NOT use your personal data for unsolicited marketing without your explicit consent.
4. Who We Share Data With
We share your data with the following trusted third parties:
- UKAB — as required for accreditation oversight
- CQI & IRCA — for training certification records
- EmailJS — contact form delivery (data processor)
We do not sell, rent, or trade personal data with any third parties for commercial purposes.
5. International Data Transfers
Some of our data processors may operate outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Enquiry data | 12 months from last contact |
| Certification records | Duration of certification + 6 years |
| Training records | 6 years from course completion |
| Website analytics | 26 months (anonymised) |
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access — request a copy of your data
- Right to Rectification — correct inaccurate data
- Right to Erasure — request deletion of your data
- Right to Restriction — limit how we process your data
- Right to Portability — receive your data in a portable format
- Right to Object — object to processing based on legitimate interests
To exercise any right, contact us at info@icb-uk.biz. We will respond within 30 days.
8. Cookies
We use the following types of cookies:
- Essential cookies — required for the website to function
- Preference cookies — remember language and region settings
- Analytics cookies — anonymised website usage statistics
We do not use advertising, retargeting, or cross-site tracking cookies. You can manage or disable cookies at any time through your browser settings.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- HTTPS encryption across all pages
- Restricted access to personal data (authorised staff only)
- Regular security reviews and updates
10. Changes to This Policy
We may update this Privacy Policy periodically. Any significant changes will be communicated via this page with an updated "Last Updated" date.
11. How to Complain
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
Last Updated: April 2026