Privacy Policy

CERT. Insurance Group Limited, (“we”, “us”, “our”) respects your privacy wherever you access our services. This Privacy Notice explains how we collect, use, and protect your personal information when you visit our website certgroup.com, interact with us, or use our services.

This Notice applies globally to our operations from the UK, including activities relevant to our regulated insurance licences in the UK, European Union, Australia, and South Africa. Certain parts of this Notice provide additional information for individuals in specific jurisdictions.

1. Information We Collect

We may collect the following categories of information:

• Business contact details: name, company, role, email address, phone number.
• Account information: login credentials (where applicable), user preferences.
• Technical data: IP address, browser type, device identifiers, cookies and analytics data.
• Communications: enquiries, correspondence, support requests.
• Compliance information: documents or details required for regulatory due diligence.

We do not intentionally collect sensitive personal data unless required by law or regulation.

2. How We Use Your Information

We process personal information to:

• Provide and manage our services,
• Communicate with you and respond to enquiries,
• Comply with regulatory obligations in relevant jurisdictions,
• Improve our website, platforms, and client services,
• Protect against fraud, misuse, and security threats.

3. Legal Bases for Processing

Our lawful bases depend on jurisdiction:

• UK & EU GDPR: processing is based on:
  • performance of a contract,
  • legal/regulatory obligations,
  • our legitimate interests in operating our business, or
  • consent (for marketing/cookies).
• South Africa (POPIA): processing is based on:
  • your consent,
  • necessity for contract performance,
  • compliance with law, or
  • our legitimate interests balanced against your rights.
• Australia (Privacy Act 1988, APPs): we collect, use and disclose personal information only as reasonably necessary for our functions or activities, with your consent, or as otherwise required/authorised by law.

4. International Transfers

As an international business, we may transfer your personal information between the UK, EU, Australia, South Africa, and other jurisdictions where we operate.

• For UK/EU residents, transfers outside the UK/EU are made under EU adequacy decisions or with appropriate safeguards utilising the UK International data Transfer Agreement (IDTA).
• For Australian residents, we will take reasonable steps to ensure overseas recipients do not breach the Australian Privacy Principles (APPs).
• For South African residents, we will only transfer personal information in compliance with section 72 of POPIA.

5. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you,
• Request correction of inaccurate or incomplete data,
• Request deletion/erasure of your data,
• Object to or restrict certain processing,
• Withdraw consent at any time (where consent is the basis),
• Data portability (UK/EU),
• Lodge a complaint with your local data protection authority.

Contacts for complaints:

• UK: Information Commissioner’s Office (https://www.ico.org.uk)
• EU: Your national data protection authority (https://edpb.europa.eu)
• Australia: Office of the Australian Information Commissioner (http://www.oaic.gov.au)
• South Africa: Information Regulator (http://www.justice.gov.za/inforeg)

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Notice and to comply with applicable legal and regulatory obligations.

7. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction.

8. Cookies & Tracking

We use cookies and similar technologies for functionality and analytics. You can control cookies through your browser settings. A separate Cookie Policy provides more detail.

9. Contact Us

For privacy queries, please contact us at:

[email protected]

Cert. Holdings Limited

3^rd Floor, 114a Cromwell Road

Kensington

London

England

SW7 4AG

If you wish to exercise your rights under this Notice, please contact us via the above details.