Privacy Policy

Policy

Our Policy

Certinova Management Pvt. Ltd.. (“CERTINOVA”) is a globally recognized and IAS-accredited ISO certification body that values and protects the confidentiality, integrity, and lawful use of personal and business-related information. As part of our operations, we interact with a wide range of individuals and organizations across sectors, jurisdictions, and digital platforms.

This Privacy Policy reflects our commitment to maintaining the highest standards of data privacy and governance while delivering ISO certification, audit, and assessment services. It outlines how we collect, store, process, share, and safeguard data in compliance with Indian laws, international data protection standards, and accreditation body requirements.

This Privacy Policy outlines our approach to data collection, processing, sharing, retention, and security, in accordance with applicable national and international data protection regulations.

1. Scope of Policy

This Privacy Policy applies to all personal, organizational, and technical data collected and processed by Certinova Management Pvt. Ltd.. (CERTINOVA) during the delivery of its ISO certification, audit, training, and compliance services. It also extends to interactions via CERTINOVA’s official website, client support platforms, communication tools, surveys, and documentation exchanges.

The scope of this policy includes:

Clients: Individuals and organizations applying for certification, participating in audits, or receiving training services
Employees & Auditors: Individuals engaged with CERTINOVA in a professional capacity who may share or receive personal or professional data
Third Parties: Vendors, assessors, external experts, and accreditation stakeholders involved in service delivery
Website Visitors: Any user accessing CERTINOVA’s website or interacting with online forms, feedback tools, or informational content

This policy governs all forms of data collection—manual or automated—and applies regardless of whether data is stored digitally, physically, or in hybrid formats. It ensures that all data processing is lawful, transparent, secure, and limited to legitimate business or regulatory purposes.

2. Types of Information We Collect

We may collect the following categories of personal and organizational data:

2.1 Identification Information: Name, designation, job title, and photo (if applicable)

2.2 Contact Information: Phone number, email address, mailing address

2.3 Professional Details: Company name, industry type, size, location, business operations

2.4 Certification Data: Audit reports, application forms, corrective actions, scope statements

2.5 Digital Interactions: Website behavior analytics, IP addresses, device information, cookies, browser type, geographic data

3. Purpose of Data Collection and Use

We collect and use data for multiple legitimate purposes, including but not limited to:

Processing certification, training, or application-related requests
Conducting audits, assessments, and issuing certifications
Managing contractual relationships, billing, and service delivery
Sending operational and technical updates, audit schedules, and compliance reminders
Responding to inquiries, handling complaints, and resolving disputes
Performing internal quality checks and improving operational efficiency
Meeting legal, regulatory, and accreditation obligations

4. Legal Basis for Processing

Certinova Management Pvt. Ltd.. processes personal data on the following lawful grounds:

4.1 Consent: Provided voluntarily by clients or website users

4.2 Contractual Necessity: When data processing is required to fulfill contractual obligations

4.3 Legal Compliance: As required by regulatory and accreditation authorities

4.4 Legitimate Interest: For ensuring high-quality service delivery, risk mitigation, and information security

5. Data Retention

We retain personal and organizational data only as long as necessary for the purpose it was collected, or as mandated by laws, regulatory authorities, or accreditation bodies. Once the retention period ends, data is securely archived or permanently destroyed in accordance with our internal retention and disposal policies.

6. Information Disclosure and Third-Party Sharing

Certinova Management does not sell, lease, or rent personal information to third parties. However, data may be shared under controlled conditions with:

Accreditation bodies (e.g., IAS) for audits and surveillance
External auditors, trainers, or assessors under signed confidentiality agreements
Legal or regulatory authorities if disclosure is mandated by law
IT service providers, database hosts, or platform vendors (only when necessary and under strict data protection clauses)

7. Data Security Measures

We have implemented a combination of physical, organizational, and technological safeguards to protect data. These include:

Role-based access control and data encryption
Secure document transmission and storage systems
Regular cybersecurity audits and employee awareness training
Monitoring of system activity and breach detection protocols

8. Cookies, Analytics, and Tracking Technologies

Our website may use cookies, beacons, session identifiers, and third-party analytics tools (e.g., Google Analytics) to:

Understand user behavior and optimize site navigation
Personalize user experience and content delivery
Measure campaign effectiveness and improve service offerings

Users may manage cookie preferences or disable cookies via browser settings. Some features may be limited if cookies are disabled.

9. International Data Transfers

CERTINOVA may process or store data on servers located in jurisdictions outside the country of origin. When data is transferred internationally, we ensure protection through legally binding agreements, adherence to standard contractual clauses, and alignment with GDPR and similar global data protection standards.

10. Your Data Protection Rights

Depending on your jurisdiction, you may have the right to:

Access, view, and request a copy of your personal data
Correct inaccurate or outdated data
Object to or restrict processing of your data
Request deletion, where legally permissible
Withdraw previously given consent without affecting the lawfulness of earlier processing

11. Compliance with Legal and Regulatory Frameworks

Certinova Management Pvt. Ltd. complies with all applicable data protection laws, including:

The Indian Information Technology Act (2000)
Guidelines from the Ministry of Electronics & IT (MeitY)
Applicable accreditation body requirements (e.g., IAS)
Best practices aligned with the General Data Protection Regulation (GDPR) and global privacy frameworks

12. Changes to This Privacy Policy

We reserve the right to modify or update this policy periodically to reflect changes in applicable laws, regulatory requirements, or service enhancements. The latest version will always be published on our official website. We encourage all users to check the policy regularly for updates.

13. Contact Information

For questions regarding this policy or to exercise your rights under applicable privacy laws, please contact our Data Privacy Officer:

Email: info@certinova.co.in
Website: www.certinova.co.in

Cookie Policy

At Certinova Management Pvt. Ltd., we are committed to protecting your privacy and enhancing your experience while browsing our website. This Cookie Policy explains how we use cookies and similar technologies on our website. By continuing to use our website (www.certinova.co.in), you consent to the use of cookies as described below.

We believe in transparent communication about the types of data we collect and how it is used to improve our digital services. Cookies not only support the technical performance of our website but also help personalize your interaction, deliver targeted content, and analyze web traffic patterns for future development. Our goal is to maintain a seamless, secure, and optimized browsing experience for all visitors while complying with global data privacy regulations.

1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or smartphone) when you visit our website. These files help us recognize your device, remember your preferences, improve website functionality, and offer a more personalized experience. Cookies typically do not store personal data but may be linked to identifiable information we store elsewhere.

They may be set by us (first-party cookies) or by third parties whose services we utilize (third-party cookies). Cookies enhance your navigation, retain login states, save session variables, and help maintain secure connections. Some cookies also enable features such as language localization, responsive layout adjustments, and protection from cross-site scripting attacks.

2. Types of Cookies We Use

2.1 Essential Cookies: Required for the website to function correctly, supporting features such as page navigation, access to secure areas, and form submissions. These cannot be disabled and are necessary for the proper functioning of core services.

2.2 Functional Cookies: Enable the website to remember choices such as language, location, display preferences, or login credentials. They allow for a customized user interface and help improve user engagement with the site’s content and features.

2.3 Analytics Cookies: Tools like Google Analytics collect anonymous data about website usage to help us understand visitor behavior, measure site performance, and improve content. We track pages visited, interaction duration, traffic sources, bounce rates, and exit pages to identify opportunities for optimization.

2.4 Marketing Cookies: These track browsing behavior across websites to serve relevant advertisements. They are typically set by advertising networks and third-party platforms. Marketing cookies support remarketing campaigns, user segmentation, and the measurement of campaign effectiveness.

2.5 Performance Cookies: Monitor how users interact with the site, such as which pages are most visited or what features are used, helping us optimize site performance. These cookies are used for tracking load times, page responsiveness, and overall server performance.

3. Duration of Cookies

3.1 Session Cookies: These expire once you close your browser and are used only during your active session. They help maintain continuity during your visit (e.g., tracking form entries, shopping cart states, or navigation history).

3.2 Persistent Cookies: These remain on your device for a set period or until deleted manually. They help retain user preferences, recognize returning visitors, and support long-term analytical tracking.

The exact lifespan of each cookie depends on its function and the settings of your browser. Persistent cookies may remain for a few days to several months, depending on the cookie purpose.

4. Third-Party Cookies

CERTINOVA’s website may incorporate cookies from third-party services such as social media platforms (e.g., Facebook, LinkedIn), embedded content providers (e.g., YouTube), and external advertising or analytics services. These cookies are governed by the respective third-party privacy and cookie policies, not by CERTINOVA.

These third-party cookies may include tracking pixels or plugins that allow for content sharing, video embedding, interactive forms, or social interactions. CERTINOVA does not control these cookies or have access to the data they collect. We recommend reviewing each third-party’s privacy policy to understand their data collection and usage practices.

5. Data Collected Through Cookies

Information that may be collected includes:

Browser and device type and version
Operating system and screen resolution
IP address and approximate geographic location
Pages visited, time spent per page, and total session duration
Referral source (e.g., search engine, social media, email link)
Clicks on call-to-action buttons or navigation elements
Frequency of returning visits and previous visit history

This data helps us:

Analyze website traffic, usage patterns, and visitor behavior
Improve page performance and site structure
Enhance navigation and accessibility for different devices
Detect suspicious activity, potential threats, or unauthorized usage
Develop targeted content, tools, and services that meet visitor needs

All data collected through cookies is processed in compliance with CERTINOVA’s Privacy Policy and applicable national and international data protection laws, such as the Indian IT Act and GDPR where applicable.

6. Updates to This Cookie Policy

CERTINOVA System Certification Pvt. Ltd. may update this policy periodically to reflect changes in technology, legal requirements, industry best practices, or our operational processes. Updates will be published on this page with the revised effective date and will take immediate effect upon publication.

We encourage all visitors and clients to review this page regularly to stay informed about how we use cookies and how your data is managed while using our digital platforms.

7. Consent

By continuing to use our website without disabling cookies through your browser settings, you agree to our use of cookies in accordance with this Cookie Policy. If you do not consent, you should modify your browser settings to block cookies or discontinue use of our site.

Most modern browsers allow you to:

Delete cookies stored on your device
Block third-party or all cookies
Receive notifications when a website attempts to save a cookie

Refer to the help section or privacy settings of your browser to exercise control over cookies. Be advised that blocking essential cookies may affect site functionality.

8. Contact Information

If you have any questions, concerns, or requests related to this Cookie Policy or your personal data:

Email: info@certinova.co.in
Website: www.certinova.co.in

IMPARTIALITY POLICY

PROCEDURE FOR IMPARTIALITY COMMITTEE

Establishment of Committee

The Impartiality committee is formed as per the requirement of the of the standards ISO/IEC 17021-1:2015. The basic intent of forming the committee is to safeguard the impartiality along with the other interest of the organisation. The committee is formed with the following members

a) Director Certifications
b) Operations Manager ( Non-Voting Members )
c) Marketing Manager ( Non Voting Members )
d) Administration Manager ( Non Voting Members )

a) Minimum Five of the following

Representative office bearer of the national level industrial organization.
Representative office bearer of the state/District level industrial organization.
Retired senior most gazetted departmental head from Government/Public limited Company.
Any administrative government officer of the rank of IAS or IPS.
Any Engineering Graduate with minimum 15 years of work experience in public sector units or in a unit with minimum 100 employee’s strength.
A Registered Chartered Accountant
Manager of a Nationalized Bank
A Representative of Clients.
Development officer of Insurance Company.
Registered Lead Auditor with 15 years of experience.
Graduate Engineer with 5-8 years experience & Lead auditor and has to a member of CC committee.

Functioning

The Impartiality committee is meeting in the month of June every year. But the meeting can be called in-between if required by the Top management of the CERTINOVA.

(I) The meeting will be conducted at Centinova Management office or the Venue as decided by the CERTINOVA.

The notice is issued two week in advance to every committee member to plan their schedule.

QUORRUM OF MEETING

To assist in developing new policies related to impartiality of its certifications activity to be discussed along with the review suitability of the existing one.
Review & verification adequate arrangements and financial status.
To discuss the financial evaluation and source of income for the smooth operations of the CERTINAVA and promotional activities for improvements.
To review any financial crunch or lust should not pressure to compromise the impartiality of the certification ethics.
To counteract any tendency on the part of certification body to allow commercial or other considerations to prevent the consistent objective provision of certification activity.
To advice on matters affecting confidence in certifications, including openness and public perception.
Review certification decision-making processes of the certification body.
Review of the implementation of the policies and procedure established for certification committee for certification committee. For Changing the structure of the Committee a meeting will be called and voting will be done, only voting members will vote and select or reject the application of the new member. Maximum voting will be considered the final decision for restructuring of the Impartiality committee.

All members required for meeting shall be physically present; if it is not possible for anybody, the meeting details is submitted to him through mail or courier and he can submit his acceptance, comment or suggestion through mail to the management representative within 15 working days.

Records of the meeting will be kept in hard with by the Management representative; copies will be circulated either in soft or hard to each member.

Report of the Review meeting submitted to Top management of Certinova (I) by Management representative. These committees shall be free from any commercial, financial and other pressure that might influence decisions.

Although this committee cannot represent every interest, a certification body should identify and invite key interests. Such interests may include: clients of the certification body, customers of organizations whose management systems are certified, representatives of industry trade associations, representatives of governmental regulatory bodies or other governmental services, or representatives of non-governmental organizations, including consumer organizations.

Quality Policy

At Certinova Management Pvt. Ltd., quality is more than a promise—it’s a foundational principle that guides our operations, decision-making, and stakeholder engagement. As a globally active, IAS-accredited certification body operating in accordance with ISO/IEC 17021-1 and related technical standards, CERTINOVA is committed to delivering certification services that are transparent, evidence-based, and focused on client value, compliance, and continual improvement.

We recognize that our role as a certification body carries public trust and sectoral responsibility. We pledge to ensure that every audit, every report, and every certification decision meets the highest standards of integrity, consistency, and regulatory compliance. Our services are designed not only to verify compliance but also to support clients in achieving operational excellence, legal conformity, and enhanced stakeholder confidence.

Our Commitment

CERTINOVA is dedicated to offering certification services that are:

Independent, transparent, and consistent in application across all industries
Technically competent, accurate, and aligned with ISO/IEC 17021 and relevant scheme-specific technical documents (e.g., ISO/IEC 27006, ISO/TS 22003)
Focused on achieving high levels of client satisfaction while maintaining neutrality and strict third-party verification principles
Delivered through qualified auditors and experts who follow risk-based auditing principles
In full conformity with national and international accreditation expectations, including IAS and IAF guidelines

We strive to add measurable value to our clients by helping them:

Align with globally recognized management system standards
Strengthen internal controls, reduce operational risks, and ensure customer satisfaction
Increase market access and credibility through credible certification

Key Objectives

To achieve and sustain our commitment to quality, CERTINOVA shall:

Establish, maintain, and continuously improve a Quality Management System (QMS) compliant with ISO/IEC 17021-1 and applicable sector-specific guidance documents (e.g., ISO/IEC 17021-2/-3/-5/-10)
Grant certifications only when clear, traceable, and adequate objective evidence confirms conformity to the standard being audited
Maintain certification records, documentation, and audit trails with full traceability and compliance with IAS and IAF mandates
Set measurable and continually reviewed quality objectives focused on: auditor competency, service timeliness, client satisfaction, and audit accuracy
Apply risk-based thinking to all processes and encourage corrective and preventive action based on audit outcomes
Ensure all certification decisions are made by competent, impartial committees with no influence from audit teams

Organizational Culture

Regularly evaluating auditor and staff competencies, and offering ongoing professional development, coaching, and retraining
Building a culture of openness and mutual respect between clients and CERTINOVA representatives to facilitate effective audit outcomes
Embedding a continual improvement philosophy through internal quality audits, annual reviews, and management feedback
Encouraging feedback from stakeholders to improve the delivery, consistency, and accuracy of our certification services
Instilling accountability, ethical behavior, and transparent conduct at all levels of the organization

Leadership Responsibility

Allocating and mobilizing adequate technical, financial, and human resources for QMS implementation and improvement
Regularly reviewing the policy’s relevance and effectiveness, ensuring it reflects strategic direction, regulatory requirements, and evolving market needs
Promoting impartiality and protecting decision-making from undue influence through structural and procedural safeguards
Supporting the functioning of the impartiality committee, appeals panel, and grievance redressal mechanisms
Upholding a corporate culture of zero-tolerance for non-conformity, bribery, or breach of code of ethics, and initiating corrective actions where required

This Quality Policy is communicated across all levels of CERTINOVA, from field auditors to executive management. It is made available to clients, stakeholders, and the public. Reviewed at regular intervals, it reflects our ongoing commitment to excellence, integrity, and improvement. It is signed and endorsed by the Chief Executive Officer (CEO) to demonstrate our leadership’s accountability and dedication to the highest standards of certification service.

Signed,
CEO
Certinova Management Pvt. Ltd.