Board of Standardization & Quality Control (BSQC) is a UK-registered independent assurance, audit and certification organisation.
| Purpose | Indicative lawful basis |
|---|---|
| Respond to enquiries and prepare proposals | Legitimate interests and steps at your request before contract |
| Deliver audits, examinations and certification | Contract and legitimate interests; legal obligation where applicable |
| Verify identity, prevent fraud and protect scheme integrity | Legitimate interests; legal obligation where applicable |
| Publish certificate-directory information | Contract and legitimate interests; consent only where legally appropriate |
| Handle complaints, appeals and legal claims | Contract, legitimate interests and legal obligation |
| Send requested updates and service communications | Contract or legitimate interests |
| Send optional marketing | Consent or legitimate interests where permitted, with opt-out rights |
| Operate analytics and optional cookies | Consent where required |
We may share necessary information with authorised auditors, examiners, reviewers, certification decision-makers, accreditation or scheme-oversight bodies, IT and hosting providers, payment processors, professional advisers, regulators, law-enforcement authorities and parties involved in a corporate transaction. Access is limited by purpose, contract and confidentiality.
Where data is accessed or stored outside the UK, we use an applicable safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful mechanism, together with risk and security controls where required.
We retain information only for as long as needed for certification-cycle integrity, contractual and legal obligations, complaints and appeals, fraud prevention, accreditation or scheme rules, and the establishment or defence of legal claims. The approved retention schedule specifies periods by record category. Unsuccessful candidate and enquiry data should not be kept indefinitely.
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent, and rights relating to automated decision-making.
Rights may be limited where law, examination security, legal claims or third-party rights apply. Contact privacy@[domain]. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
We apply organisational and technical controls proportionate to risk. Our services are generally intended for adults and organisational representatives; any service involving minors requires a specific safeguarding and privacy assessment. We may update this notice and will publish the effective date and material changes.