1 Who We Are
EURO Universal Accreditation Services (EUAS) is a UK-based independent ISO certification body. Our registered address is 2 Weavers Ct, Halstead CO9 2JH, London, United Kingdom.
We are the data controller for personal information collected through this website and our certification processes. If you have any questions about this policy or how we handle your data, please contact us at info@euas.co.uk.
2 What Data We Collect
We may collect and process the following personal data:
- Contact information — name, email address, and phone number submitted via our contact form.
- Certification data — company name, address, scope of certification, and certificate details for issued certificates.
- Usage data — IP address, browser type, pages visited, and time spent on the site, collected automatically via server logs.
- Communication records — emails and enquiries you send to us.
We do not collect sensitive personal data (such as health information, financial details, or government ID numbers) through this website.
3 How We Use Your Data
We use the data we collect for the following purposes:
- To respond to enquiries submitted through our contact form.
- To issue, maintain, and verify ISO certificates.
- To send certificate reminders and expiry notifications to certified organisations.
- To improve our website and services.
- To comply with legal obligations under UK law.
We do not use your data for automated decision-making or profiling.
4 Legal Basis for Processing
We process your personal data under the following legal bases as defined by UK GDPR:
- Legitimate interests — responding to enquiries and operating our certification services.
- Contractual necessity — processing data required to fulfil certification agreements.
- Legal obligation — retaining records as required by applicable law.
- Consent — where you have explicitly opted in to receive communications from us.
5 Data Sharing
We do not sell, rent, or trade your personal data to third parties. We may share data only in the following circumstances:
- Service providers — trusted third parties who assist in operating our website or business (e.g. hosting provider, email service), bound by confidentiality agreements.
- Legal requirements — if required by law, court order, or regulatory authority.
- Certificate verification — certificate holder names, certificate numbers, and scopes are made publicly searchable on this website for verification purposes. This is a core function of our certification service.
6 Data Retention
We retain your personal data only for as long as necessary:
- Contact form enquiries — up to 2 years from the date of submission.
- Certificate records — for the duration of the certificate plus 7 years, as required for audit and legal purposes.
- Server logs — up to 90 days.
After the applicable retention period, data is securely deleted or anonymised.
7 Cookies
This website uses only essential session cookies required for the admin panel to function. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
If this changes in the future, we will update this policy and seek your consent where required.
8 Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your data where there is no legitimate reason for us to continue processing it.
- Right to restrict processing — request that we limit how we use your data.
- Right to data portability — request your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests.
To exercise any of these rights, please contact us at info@euas.co.uk. We will respond within 30 days.
9 Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:
- HTTPS encryption for all data transmitted to and from this website.
- Password-protected admin access with session timeouts.
- Restricted access to personal data on a need-to-know basis.
No method of transmission over the internet is 100% secure. If you have concerns about a specific data breach, please contact us immediately.
10 Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. We encourage you to review this page periodically.
Continued use of our website after any changes constitutes your acceptance of the updated policy.
11 Contact & Complaints
If you have questions or concerns about how we handle your data, please contact us:
- Email: info@euas.co.uk
- Address: 2 Weavers Ct, Halstead CO9 2JH, London, United Kingdom
If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.