Privacy Policy
Last updated: October 2026
1. Data Controller
The data controller responsible for processing your personal data is:
CertiTrue LLC
EIN 36-5132620
2 South Biscayne Boulevard, Suite 3200 5173
Miami, FL 33131, United States
Email: info@certitrue.com
2. Data Collected
When you use our contact form, we collect the following personal data:
- Full name
- Email address
- Company name
- Type of service requested
- Message content
We do not collect sensitive data categories as defined by applicable data protection legislation.
3. Legal Basis for Processing
The processing of your personal data is based on your freely given, specific, informed, and unambiguous consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).
You may withdraw your consent at any time by contacting us at info@certitrue.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
4. Purpose of Processing
Your personal data is processed for the following purposes:
- To respond to your queries and requests submitted through the contact form.
- To manage and maintain the commercial relationship arising from your enquiry.
We will not use your data for purposes incompatible with those stated above without your prior consent.
5. Data Retention
Your personal data will be retained for a period of two (2) years from the date of your last contact with us.
Once this period has elapsed, your data will be securely deleted or anonymised, unless a longer retention period is required or permitted by applicable law.
6. Your Rights
Under applicable data protection legislation, you have the following rights regarding your personal data:
- Right of access: obtain confirmation of whether we process your data and receive a copy.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your data when it is no longer necessary.
- Right to data portability: receive your data in a structured, commonly used, machine-readable format.
- Right to restriction of processing: request that we limit the use of your data in certain circumstances.
- Right to object: object to processing based on our legitimate interests.
To exercise any of these rights, please contact us at info@certitrue.com.
You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es if you consider that the processing of your data infringes applicable regulations.
7. International Data Transfers
As CertiTrue LLC is based in the United States, your personal data may be transferred to and processed in a country outside the European Economic Area (EEA).
Such transfers are carried out with appropriate safeguards in place, specifically Standard Contractual Clauses approved by the European Commission, which ensure an adequate level of protection for your personal data in accordance with GDPR requirements.
8. Security Measures
We are committed to protecting the security of your personal data. We implement technical and organisational security measures aligned with the ISO/IEC 27001 standard to prevent unauthorised access, loss, alteration, or disclosure of your data.
All personnel with access to personal data are subject to confidentiality obligations.
9. Contact
For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us at:
Email: info@certitrue.com
CertiTrue LLC, 2 South Biscayne Boulevard, Suite 3200 5173, Miami, FL 33131, United States