Are you GDPR-compliant and ICO-registered?

Security, Privacy & Data Protection

CertNudge is registered with the Information Commissioner's Office (ICO), as stated in our Privacy Policy.

We operate processes intended to meet our obligations under UK data-protection law, including the UK GDPR and Data Protection Act.

What ICO registration means

ICO registration records CertNudge’s data-protection fee registration. It does not mean that the ICO has audited, approved or certified every aspect of the service.

How CertNudge approaches data protection

Clear purposes

The Privacy Policy explains what personal information CertNudge processes and why it is needed.

Service providers

The Privacy Policy identifies the types of processors used to operate areas such as hosting, payments and email delivery.

Retention and deletion

Information is retained and deleted according to the purposes, legal obligations and processes described in the Privacy Policy.

Data-protection rights

The Privacy Policy explains the rights available to individuals and how to make a relevant request.

Your responsibilities when using CertNudge

  • Upload only certificate evidence and relevant property compliance records.
  • Do not upload tenancy agreements, identification documents or unnecessary tenant personal data.
  • Keep organisation access restricted to people who genuinely need it.
  • Send secure share links only to the intended recipient.
  • Remove team access and revoke share links when they are no longer required.

Avoid absolute compliance claims

Data-protection compliance depends on ongoing legal, technical and organisational practices. ICO registration should not be described as a guarantee that every processing activity is automatically compliant.

Read the current Privacy Policy for information about purposes, processors, retention, data locations and individual rights.

Read the Privacy Policy
Was this helpful?
Share this FAQ