Privacy Policy

Effective date: 06 January 2026
Last updated: 01 March 2026

1. Introduction

This Privacy Policy explains how MannCert Ltd processes personal data in connection with its certification, assessment, registry, enforcement, and governance functions. MannCert Ltd is incorporated in England and Wales and processes personal data in accordance with the UK GDPR and Data Protection Act 2018.

This Policy does not apply to Mann Mechanics, which is a separate entity with its own legal documentation.

2. Data Controller

MannCert Ltd, 60 Tottenham Court Road, Office 889, Fitzrovia, London, W1T 2EW.

Company Number: 17189624

Contact: [email protected]

3. Scope

• Certification applications and enquiries

• The conformity assessment process

• Registry listing

• Complaints and appeals

• Visits to MannCert websites

4. Categories of Personal Data

Identity and professional data, certification and assessment data, registry data, communications data, and technical usage data.

5. Lawful Bases

• Contractual necessity: processing applications and assessments

• Legitimate interests: registry maintenance, enforcement, governance, security

• Legal obligation: statutory record-keeping

• Public interest: the registry serves a transparency function

6. Registry Publication

Registry data is published as an operational necessity. Applicants consent to publication as described in the Certification Process. Entries remain for historical integrity.

7. Data Sharing

• Service providers under contractual confidentiality

• Professional advisers where required

• Public authorities where legally required

Data is not shared with the framework body by default. We do not sell personal data.

8. Retention

Retained for the certification period, statutory obligations, and a reasonable period thereafter for registry integrity and legal purposes.

9. International Transfers

Appropriate safeguards are used where data is transferred outside the UK or EEA.

10. Security

Appropriate technical and organisational measures protect personal data

11. Your Rights

Subject to law: access, correction, erasure (subject to registry integrity), restriction, objection, portability.

Requests: [email protected].

12. Complaints

You may complain to the Information Commissioner’s Office. We encourage contacting us first.

13. Changes

This Policy may be updated. The effective date will be updated.

14. Status Note

This Policy governs MannCert Ltd only. Framework development, licensing, and consulting are governed by the framework body under separate instruments.