Privacy Policy

Effective Date: May 8, 2026

This Privacy Policy applies to the United Kingdom section of Audit Advisor, including pages intended for users seeking certification services in the United Kingdom.

Audit Advisor is operated by Alexander Chumachenko as an individual project. In this Privacy Policy, “Audit Advisor,” “we,” “us,” and “our” refer to the operator of the Audit Advisor website and related online services.

Audit Advisor is an independent online service that helps companies find certification bodies and submit requests for certification quotes. Audit Advisor is not a certification body and does not issue certificates.

This Privacy Policy explains how we collect, use, share, retain, and protect personal data when you use the UK section of Audit Advisor.

1. Business and Professional Use
Audit Advisor is intended for business and professional use.
The website is designed for companies and representatives acting on behalf of organisations that are interested in certification services, including ISO and other management system certification.
By submitting information through Audit Advisor, you confirm that:
  • you are acting in a business or professional capacity;
  • you are authorised to provide the business and contact information included in your request;
  • the information you provide is accurate to the best of your knowledge;
  • you understand that selected certification bodies may contact you directly in response to your request.
Audit Advisor is not intended for personal, household, or children’s use.

2. Controller
For the purposes of UK data protection law, the controller of personal data collected through the UK section of Audit Advisor is:
We determine the purposes and means of processing personal data submitted through the website.
Selected certification bodies that receive your request may act as independent controllers for their own use of your information.

3. Information We Collect
We collect information that you voluntarily provide through forms on the website, as well as information that may be collected automatically through cookies, analytics tools, hosting services, and similar technologies.
The types of information we collect depend on how you use the website.

4. Certification Request Information
When you submit a request for certification quotes, we may collect information such as:
  • company name;
  • company location, including country, city, region, address, or service location;
  • company locations or sites;
  • number of employees at each location;
  • selected certification standard or standards;
  • certification scope or primary business activity;
  • contact person name;
  • business email address;
  • business phone number;
  • preferred contact method;
  • preferred contact time or additional notes;
  • selected certification bodies;
  • date and time of submission;
  • technical information that may be collected automatically, such as IP address, browser type, device data, approximate location, and website usage data.
You should not submit sensitive personal data through the certification request form.

5. Contact Form Information
When you contact us through the contact form, we may collect:
  • name;
  • company;
  • business email address;
  • phone number, if provided;
  • reason for contact;
  • message content;
  • date and time of submission;
  • technical information that may be collected automatically.
The contact form may also be used for privacy-related requests.

6. Partner Form Information
If you represent a certification body or related organisation and submit a partner inquiry, we may collect:
  • company name;
  • contact person;
  • business email address;
  • website;
  • accreditation or recognition information;
  • standards covered;
  • regions, countries, or service areas;
  • message content;
  • date and time of submission.
We may also collect or verify information about certification bodies from public accreditation and scheme directories, including information about accreditation status, standards, locations, website, logo, contact details, and other publicly available business information.
Some information about certification bodies may be displayed publicly in the Audit Advisor directory.

7. Certification Cost Calculator
The certification cost calculator, where available, is intended to provide an estimated budget based on limited information entered by the user, such as selected standard and number of employees.
The calculator is designed to perform calculations on the page. Information entered into the calculator is not intentionally submitted to Audit Advisor unless you separately submit a form on the website.

8. Cookies, Analytics, and Similar Technologies
We may use cookies, pixels, analytics tools, and similar technologies to operate the website, understand how visitors use it, measure performance, improve user experience, and support advertising or retargeting activities.
These technologies may collect information such as:
  • pages visited;
  • time spent on pages;
  • links clicked;
  • browser and device information;
  • approximate location based on IP address;
  • referral source;
  • interactions with forms and website elements.
We may use third-party analytics and advertising providers, such as Google Analytics, Meta Pixel, Tilda Analytics, Yandex Metrica, or similar tools.
These providers may use cookies, pixels, or similar technologies according to their own privacy policies. Some tools may collect information that helps measure website performance or support advertising and retargeting.
Where required by UK law, we seek consent before placing non-essential cookies or similar technologies on your device. You can also control cookies through your browser settings and, where available, through cookie preference tools on the website.

9. Lawful Bases for Processing
We process personal data only where we have a lawful basis to do so under UK data protection law.
Depending on the context, we may rely on the following lawful bases:
Performance of a contract or steps taken at your requestWe may process information to provide the service you request, such as helping you submit a certification quote request to selected certification bodies.

Legitimate interests
We may process information where it is necessary for our legitimate interests or the legitimate interests of users or certification bodies, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
  • operating and improving Audit Advisor;
  • helping companies find suitable certification bodies;
  • processing business inquiries;
  • managing partner relationships;
  • preventing misuse, spam, fraud, or abuse;
  • maintaining internal records;
  • analysing service performance;
  • improving request quality and user experience.

Consent
We may rely on consent where required, including for certain cookies, analytics, advertising technologies, or optional marketing communications.
You may withdraw consent where consent is the lawful basis for processing.

Legal obligation
We may process information where necessary to comply with applicable legal obligations.

10. How We Use Information
We may use the information we collect to:
  • process certification quote requests;
  • match users with relevant certification bodies;
  • send requests to certification bodies selected by the user;
  • respond to contact form submissions;
  • process partner inquiries from certification bodies;
  • maintain and improve the certification body directory;
  • verify public accreditation or recognition information;
  • operate, maintain, and improve the website;
  • analyse website traffic and user behaviour;
  • measure the effectiveness of marketing and advertising;
  • communicate with users and partners;
  • maintain internal records;
  • review request quality and partner performance;
  • prevent misuse, spam, fraud, or abuse;
  • comply with applicable legal obligations.

11. Sharing Certification Requests With Selected Certification Bodies
When you submit a certification request, Audit Advisor may suggest relevant certification bodies based on the selected standard, location, accreditation scope, service area, and other request details.
You may review and change the selected certification bodies before submitting your request.
After submission, we share the information you provided in the certification request with the certification bodies you selected. A single request may be sent to up to five selected certification bodies.
The selected certification bodies may contact you directly to clarify details, prepare a quote, or discuss certification services.
Certification bodies are independent third parties. Their handling of your information may be governed by their own privacy practices.
Audit Advisor expects certification bodies to use information received through Audit Advisor only to respond to the specific certification inquiry and not to add users to unrelated marketing lists without appropriate consent.

12. Payments From Certification Bodies
Audit Advisor may receive payment from certification bodies for qualified requests received through the platform.
This does not change your ability to select which certification bodies receive your information. The transfer of your request information to selected certification bodies is made to fulfil your request for certification quotes, not to sell your personal data to unrelated third parties.
We do not sell personal data to data brokers or unrelated third parties.

13. Directory Visibility and Partner Certification Bodies
Audit Advisor may display information about certification bodies in its directory. The directory may include both paid partners and non-partner certification bodies.
Paid partner certification bodies may receive higher visibility in relevant search results or directory placements when their accreditation scope, service area, and selected standards match the user’s request.
This visibility model does not mean that Audit Advisor limits users only to paid partners. Users may review available certification bodies and decide which organisations should receive their request.

14. Service Providers and Third Parties
We may use third-party services to operate the website, process forms, store information, analyse traffic, communicate with users, and manage internal records.
These services may include:
  • website platform and hosting providers;
  • form processing tools;
  • CRM tools;
  • email providers;
  • spreadsheet and data storage tools;
  • messaging tools;
  • analytics providers;
  • advertising and measurement tools;
  • backup and security tools.
Information submitted through the website may be stored or processed using tools such as Tilda, email, Google Sheets, Telegram, internal servers, and similar systems.
We use these services to operate Audit Advisor and process requests. These third parties may process information according to their own terms and privacy policies.

15. International Transfers
Audit Advisor may process, store, or access information outside the United Kingdom.
This may include processing in countries where Audit Advisor, service providers, hosting providers, email providers, analytics providers, messaging tools, or selected certification bodies are located.
Where UK data protection transfer rules apply, we aim to take appropriate steps designed to protect personal data when it is transferred outside the United Kingdom. These steps may include using appropriate safeguards, relying on applicable transfer mechanisms, or relying on an applicable exception where permitted by law.
Selected certification bodies may also be located outside the United Kingdom if you choose to send your request to them.

16. Data Retention
We retain information for as long as reasonably necessary to:
  • process certification requests;
  • respond to inquiries;
  • maintain internal records;
  • manage partner relationships;
  • review request quality;
  • resolve disputes;
  • analyse service performance;
  • prevent misuse;
  • comply with applicable obligations.
We may retain request history and partner-related records where reasonably necessary for accounting, dispute resolution, service improvement, statistics, and internal business records.
You may request deletion of your information as described in the “Your Rights” section below.

17. Data Security
We use reasonable administrative, technical, and organisational measures designed to protect information submitted through Audit Advisor.
These measures may include:
  • HTTPS encryption;
  • limited access to request data;
  • password-protected accounts;
  • two-factor authentication where available;
  • manual review of requests;
  • controlled storage in selected tools and systems;
  • deletion of outdated records where appropriate.
No method of transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted through the website or stored by third-party service providers.

18. Sensitive Personal Data
Audit Advisor is not intended to collect sensitive personal data or special category data.
Please do not submit sensitive information through the website, including:
  • national insurance numbers;
  • passport or government ID numbers;
  • financial account information;
  • health information;
  • biometric information;
  • precise geolocation;
  • information about race, ethnic origin, religion, political opinions, trade union membership, criminal records, or similar sensitive categories.
If you submit sensitive information voluntarily, we may delete it or disregard it where it is not necessary to process your request.

19. Children’s Privacy
Audit Advisor is intended for business and professional users and is not directed to children.
We do not knowingly collect personal data from children under 13. If we learn that we have collected personal data from a child under 13, we will take reasonable steps to delete that information.

20. Marketing Communications
At this time, Audit Advisor primarily uses email and contact information to respond to user requests, process certification quote requests, and communicate with certification bodies.
In the future, we may send service-related or marketing communications where permitted by law.
If we send marketing emails, we will provide a way to unsubscribe or opt out where required.
Certification bodies receiving requests through Audit Advisor should not add users to unrelated marketing lists without appropriate consent.

21. Your Rights
Depending on your location and applicable law, you may have rights in relation to your personal data.
These rights may include:
  • the right to be informed about how your personal data is used;
  • the right to access your personal data;
  • the right to request correction of inaccurate personal data;
  • the right to request deletion of your personal data;
  • the right to request restriction of processing;
  • the right to object to processing in certain circumstances;
  • the right to data portability in certain circumstances;
  • the right to withdraw consent where processing is based on consent;
  • the right to complain to the UK Information Commissioner’s Office.
To exercise your rights, contact us at: auditadvisor@yandex.ru

We may need to verify your identity or confirm details about your request before responding.
We aim to respond to rights requests without undue delay and within one month where required by applicable law. If a request is complex or if multiple requests are received, this period may be extended where permitted by law.

22. Complaints
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve the issue.
You also have the right to complain to the UK Information Commissioner’s Office.
ICO website: https://ico.org.uk/

23. UK Section and Other Regional Sections
This Privacy Policy applies specifically to the UK section of Audit Advisor.
Audit Advisor may also operate separate regional sections, including sections intended for users in the United States and Russia. Separate privacy policies may apply to those sections.
If you submit a request through the UK section and your request is not relevant to the UK service, we may redirect you to another regional section, ask you to resubmit your request through the appropriate page, or delete the request where appropriate.

24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
When we make changes, we will update the “Effective Date” at the top of this page. Your continued use of the website after the updated Privacy Policy is posted means that you accept the updated policy.

25. Contact Us
If you have questions about this Privacy Policy or want to submit a privacy-related request, contact us at: