Privacy Policy
At Company Certification LLC (CCI Services), we respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under the GDPR and applicable laws.
1. Who We Are
Company Certification LLC is a global provider of compliance, certification, and auditing services. For any privacy concerns, you can contact:
[email protected]
+1-682-907-5113
2. What Data We Collect
We may collect the following personal data:
Name, email address, phone number, job title, and company name
Payment information (invoices, billing details)
Login details for SaaS applications (where applicable)
IP address, browser type, and online identifiers
Information provided during audits, training, or events
3. How We Collect Data
We collect data when you:
Contact us via email, phone, or web forms
Register for our services, newsletters, or events
Use our SaaS platforms or visit our website
Provide documents during certification and audit processes
4. How We Use Your Data
We process personal data for the following purposes:
To provide our services and manage client accounts
To communicate with you about audits, certifications, and updates
To comply with legal and financial record-keeping requirements
To improve our services and website performance
For security, fraud prevention, and regulatory compliance
5. Legal Basis for Processing
We rely on:
Contract – when delivering services you purchase
Consent – for newsletters, marketing, and optional forms
Legitimate Interest – to improve services and protect our systems
Legal Obligation – to maintain financial and regulatory records
6. Sharing Your Data
We may share data with:
Auditors and accreditation bodies
IT service providers (hosting, SaaS, email, backups)
Payment processors and accounting platforms
Group affiliates for service delivery
Regulators, if legally required
We do not sell or rent your data to third parties.
7. How Long We Keep Your Data
Client records: 5 years
Emails: 3 years
Financial data: 6 years (tax laws)
Backups: 12 months
Logs: 90–180 days
8. Your Rights
You have the right to:
Access your data
Request corrections or deletion
Restrict or object to processing
Request data portability
File a complaint with your local Data Protection Authority
9. Security
All devices and systems use encryption, secure passwords, and access controls. Backups and incident response processes are tested regularly.
10. Contact Us
For privacy-related questions or to exercise your rights, please contact our ISMS Manager
The Certification Process
Online gap analysis allows us to see the current
- quality benchmark within your organization,
- the finances required
- The time required for this project (System and Certification Fee)
Your Estimate will be shared with you in 24 hours.
Upon Estimate Approval the project starts:
- A client executive is assigned to your project
- Contact information is shared with you
- The Payment details are provided to you
All Support is delivered Online.
The Client Executive will provide the Documentation Templates and explain to you how to amend it.
You will be required to perform the following tasks:
- Identify your core or business processes.
- Amend documentation that meets your business needs. (Policy statements, objectives, manuals, work instructions, job descriptions, forms.)
- Encourage employees to be aware of the new documented system
- Review, approve, and distribute the documents to those who need access to the information.
- Ensure procedures are being performed as documented.
- Ensure employees are trained properly for the tasks they are performing.
- Create effective reporting systems.
- Monitor the effectiveness of your processes through the use of measurable data, where possible.
- Review and take action to improve in the areas required.
- Plan internal auditing activities.
- Submit your management system documentation for review to ensure it complies with the applicable standard.
- Prepare for review by an external auditor to confirm that the system’s requirements are being satisfied and that the management system is implemented effectively.
- Obtain ISO Certifcaiton
- This periodic on-site review is usually conducted annually.
- It ensures that the certified business continues to comply with Standard requirements, as confirmed during the Recertification Audit at the certification cycle's outset.
- Most are conducted remotely.
Refer to learn more about Types of Audits
