This policy explains how Certixa Ltd ("we", "us") handles personal data when you visit certixa.ai or use the Certixa platform.
Who we are
Certixa Ltd, Level39, One Canada Square, London E14 5AB, United Kingdom. Privacy questions: hello@certixa.ai.
What we collect
- Website visitors: standard server logs (IP address, browser, pages requested). This site sets no advertising or analytics cookies. Fonts are served by Google Fonts, which receives your IP address when fonts load.
- Platform customers: account details, and the compliance data you and your integrations put into your tenant, personnel records, vendor information, policies, evidence, and findings.
How we use it
For customer tenant data, we act as a processor under UK GDPR and the EU GDPR: your organisation is the controller, and we process the data solely to provide the platform, under our data processing agreement. Website and account data is processed on the basis of legitimate interests (operating and securing the service) and contract performance.
Security and retention
Data is encrypted in transit and at rest, access is role-based and logged, and tenants are isolated. Tenant data is retained while your subscription is active and deleted on your instruction or after contract end in line with the DPA. Server logs rotate on a short cycle.
Your rights
You have the right to access, correct, delete, or restrict processing of your personal data, and to object to processing or request portability. Contact hello@certixa.ai; you may also complain to the ICO (ico.org.uk) or your local supervisory authority.
Changes
Updates to this policy appear on this page with a revised date.