Privacy notice

This notice covers certia.ie and the early access list. When a company uses the Certia app, that company decides what customer and staff data goes into it. We process that data on the company’s behalf under a data processing agreement, and the company’s own privacy notice applies to it.

Who we are

[Company name] Limited, a company registered in Ireland (CRO [CRO number]) with its registered office at [Registered office address], Ireland, is the controller of the personal data described here. In this notice “we” and “us” mean that company.

For anything to do with your data, email privacy@certia.ie.

What we collect and why

If you join the early access list

• What: your work email address, company name, main trade, the page you signed up on and the date and time.
• Why: to contact you about early access, onboarding and launch.
• Lawful basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by emailing us or replying to any message we send, and we will remove you from the list.

If you email us

• What: your name, email address and whatever you choose to include.
• Why: to reply and to keep a record of the conversation.
• Lawful basis: our legitimate interest in answering enquiries (Article 6(1)(f)), or taking steps at your request before entering into a contract (Article 6(1)(b)).

When you visit the site

• Hosting and security. Our hosting provider, Cloudflare, processes your IP address, browser details and the pages you request in order to deliver the site and protect it from attacks. Lawful basis: our legitimate interest in running a secure website.
• Bot check on the early access form. Cloudflare Turnstile processes signals such as your IP address and browser details to tell people from automated bots. Cloudflare acts as our processor for this, and as an independent controller when it uses those signals to improve Turnstile. See Cloudflare’sTurnstile Privacy Addendum. Lawful basis: our legitimate interest in keeping spam and abuse off the list.
• Visitor statistics. We use Cloudflare Web Analytics to count page views. It does not use cookies or local storage and does not fingerprint visitors. Lawful basis: our legitimate interest in knowing which pages are useful.

Cookies

This site does not set any cookies of its own, and the analytics we use are cookie-free. The Turnstile check on the early access form may rely on technology that is strictly necessary for the security check; see Cloudflare’s Turnstile Privacy Addendum andCookie Policy.

Who we share it with

We use service providers to run the site and the list, and they process data only on our instructions and under contract. For this website those are Cloudflare (hosting, security, bot checks and statistics), Supabase (where the early access list is stored, in Ireland), Resend (email notifications) and Microsoft (our email). The full list is on our subprocessors page.

We do not sell personal data, and we do not share it for advertising.

Transfers outside the EEA

Some of our providers are US companies or have support staff outside the European Economic Area. Where personal data leaves the EEA, the transfer relies on the EU-US Data Privacy Framework where the provider is certified under it, or on the European Commission’s Standard Contractual Clauses.

How long we keep it

• Early access list: until you ask us to remove you, or 12 months after Certia’s general launch if you have not become a customer, whichever comes first.
• Emails: up to two years after the conversation ends, unless they become part of a customer relationship, in which case the customer agreement applies.
• Security and hosting logs: for the short periods set by Cloudflare’s standard log retention.

Your rights

Under the GDPR you have the right to:

• get a copy of the personal data we hold about you
• have it corrected if it is wrong
• have it deleted
• restrict how we use it
• object to processing based on our legitimate interests
• receive it in a portable format
• withdraw your consent at any time, without affecting what we did before

Email privacy@certia.ie to use any of these. We will reply within one month. If you are unhappy with how we handle your data, you can complain to the Data Protection Commission at dataprotection.ie, though we would appreciate the chance to put it right first.

Changes to this notice

When we change this notice we will update the date at the top of the page. If a change affects people on the early access list in a meaningful way, we will email them.