This policy explains how ScudoCyber Solutions — including its Accredion Qualis certification-body brand — collects and handles personal data on this website and during its activities, aligned with the Digital Personal Data Protection Act 2023 (DPDP) of India and the EU General Data Protection Regulation (GDPR).
Data we collect
- Website usage — pages visited, browser type, approximate location — collected via essential analytics for site operation and security.
- Enquiries and contact forms — name, email, organization and message content, used to respond to your enquiry.
- Engagement records — during audits and certification we collect information necessary to verify conformance to the standard; this may include personal data of your employees interviewed as part of an audit.
How we use it
- To respond to enquiries and provide requested proposals.
- To perform, record and defend audit and certification activities.
- To publish public certification information (client name, standard, scope, status) in the certified clients directory.
- To comply with legal, regulatory and accreditation requirements.
Legal bases
- Contract — to deliver services under a signed engagement.
- Legal obligation — where retention or disclosure is required by law.
- Legitimate interests — for security and defence against fraudulent certification claims.
- Consent — for optional communications, which can be withdrawn at any time.
Sharing
We do not sell personal data. Personal data may be shared with:
- Accreditation and witnessing bodies assessing our operations, under confidentiality obligations.
- Regulators, courts or law-enforcement authorities where legally required.
- Trusted service providers (hosting, email, secure storage) under written data-processing agreements.
Retention
Website enquiry data is retained for up to 24 months unless an engagement follows. Engagement and certification records are retained for the duration of the certification cycle plus periods required by our records retention schedule and applicable law.
Your rights
Depending on your jurisdiction, you have rights of access, correction, erasure, restriction, portability and objection over your personal data. To exercise them, contact privacy@scudocyber.com. We will respond within 30 days.
Contact and complaints
Data-protection queries: privacy@scudocyber.com. If you are unsatisfied with our response, you may complain to the Data Protection Board of India (DPDP Act 2023) or your local supervisory authority (GDPR).
