Privacy policy
What we collect, why, and how to ask us to delete it — written to describe what this site actually does, not a template of everything a site could do.
This document is a working draft pending counsel review.
Last updated 2 July 2026
1. Who we are
V-Cert Inc. (“V-Cert”, “we”) operates v-cert.org. Our office is at 2352 Coney Island Avenue, Brooklyn, NY 11223, United States. For anything in this policy, contact info@v-cert.org.
2. What we collect, and why
Application data
When you submit the application form, we collect what the form visibly asks for: your name, company name, email address, the certifications you are interested in, your product category, an approximate SKU count and your export markets. We use this to prepare and email your quote, to answer your questions, and — if you go ahead — to run the certification itself. We also record the country your request appeared to come from (derived from your IP address by our hosting provider; we do not store the IP address in the lead record), which pricing presentation you saw, and, where present, which campaign or search ad brought you to the site.
Certification records
If your product is certified, the certificate record — company name, brand names, certified scope, certificate ID, status and validity dates — is published on our certificate portal. Public verifiability is the point of certification; this is stated in the certification agreement before anything is published.
If you email us, or opt in to receive a documentation checklist or future publications, we keep the correspondence and the address you used. Every marketing-type email we send includes an unsubscribe link; certification-related correspondence is kept as part of the certification file.
Anti-abuse check
The application form may run an invisible anti-abuse verification (Cloudflare Turnstile) to filter automated submissions. It is not a puzzle CAPTCHA and does not profile you for advertising.
3. Where your data goes
- Lead storage: application submissions are stored in our lead-management records so the V-Cert Certification Team can prepare your quote and follow up. They are not sold, rented or shared with data brokers.
- Email delivery: transactional and opt-in email is sent through Resend, our email delivery provider, which processes recipient addresses on our behalf.
- Hosting: the site is served by our hosting provider, which processes technical request data (such as IP addresses) to deliver pages and maintain security logs.
We share personal data beyond this only if the law requires it. We never sell personal data.
4. Analytics and consent
We use Google Analytics 4 to understand how the site is used, implemented behind Google Consent Mode v2. For visitors in the European Economic Area, the United Kingdom and Switzerland, analytics storage is denied by default and activates only if you accept it in the consent banner; declining keeps analytics cookies off your device. We use no advertising pixels, no remarketing tags and no cross-site tracking anywhere on the site.
5. Cookies
This site sets the following first-party cookies:
| Cookie | Purpose | Lifetime |
|---|---|---|
| vc_consent | Remembers your choice in the consent banner. | Up to 12 months |
| NEXT_LOCALE | Remembers your language preference if you switch languages. | Up to 12 months |
Google Analytics cookies (prefixed _ga) are set only after consent, as described above.
6. How long we keep data
Application data that never becomes a certification is kept while the enquiry is live and then for a limited follow-up period, after which it is deleted or anonymized. Certification files and the records behind issued certificates are retained for as long as certificate history must remain checkable — a certifier that forgets its own suspensions would be worthless. Email opt-ins are kept until you unsubscribe.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, restrict or delete personal data we hold about you, and to object to processing. To exercise any of them — or simply to ask us to delete your data — email info@v-cert.org from the address in question. We acknowledge requests within 2 business days. The records behind issued certificates are subject to the retention rule above, because certificate history is a legal and public-interest record.
8. Changes
When this policy changes, the date at the top changes with it, and material changes are noted on this page. We do not retroactively expand what we collect without saying so.