Our commitment
CertFlow is built and operated to comply with the UK GDPR and the Data Protection Act 2018. We process personal data lawfully, fairly and transparently, and only for the purposes set out in our Privacy Policy.
Where your data is held
Your data is hosted in the United Kingdom on encrypted infrastructure with daily backups and full audit logging.
Your rights
You and the individuals whose data you process have the right to access, rectify, erase and port personal data, and to object to or restrict certain processing. We provide tools and support to help you meet these obligations.
Data Processing Agreement
Where we process personal data on your behalf, our Data Processing Agreement governs that processing.
Contact & complaints
For any data-protection question, contact info@certflow.co.uk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ico.org.uk).