Privacy Policy

Who We Are

• UA Expert Corporation (referred to as "UAEC", "we", "us", or "our") is an ISO certification and management consultancy body.
• Our registered office is at 17a Bolton Road, Darwen, Lancashire, BB3 1DF, United Kingdom.
• We also operate from 19B Avonmore Avenue, Trinity Gardens SA 5068, Australia.
• UAEC is the data controller for personal information collected through this website and our certification services.
• You can contact us about data protection matters at info@uaexpertcorporation.com

What Information We Collect

We collect personal information in the following ways:

• Enquiry & contact forms — name, job title, company name, email address, phone number, country, and details of your certification enquiry.
• Certification engagements — business and contact information for client organisations and their staff, as required to conduct audits and issue certificates.
• Email and telephone correspondence — records of communications between you and our team.
• Website usage — anonymised data about how visitors use our website, collected via cookies and analytics tools (see Section 9).
• Marketing preferences — whether you have opted in to receive updates and communications from UAEC.

How We Use Your Information

• To respond to enquiries submitted through our website or by email or telephone.
• To manage and deliver certification and consultancy engagements, including conducting audits and issuing certificates.
• To communicate with you about the progress of your certification engagement.
• To schedule and coordinate audit activities and surveillance visits.
• To send service-related communications — such as renewal reminders, surveillance audit notices, and updates to the status of your certificate.
• To send marketing communications, where you have opted in to receive them. You may opt out at any time.
• To comply with our legal and regulatory obligations.
• To maintain records as required for the integrity of the certification process.

Legal Basis for Processing

• Contract — processing is necessary to perform our certification and consultancy services, or to take steps prior to entering a contract with you.
• Legitimate interests — processing is necessary for our legitimate business interests, such as responding to enquiries, managing client relationships, and maintaining certification records.
• Consent — where you have given us specific consent, such as opting in to marketing communications. You may withdraw consent at any time.
• Legal obligation — where we are required to process data to comply with a legal or regulatory requirement.

Who We Share Your Data With

• We do not sell, rent, or trade your personal data to any third party.
• We may share data with trusted third-party service providers who assist in delivering our services — such as email platforms, cloud storage providers, and scheduling tools — under strict data processing agreements.
• We may share data with regulatory or accreditation bodies where this is required to validate or register a certification.
• We may disclose data where required by law, regulation, or a court order.
• If UAEC is involved in a merger, acquisition, or sale of assets, data may be transferred as part of that transaction — and you will be notified in advance.

How Long We Keep Your Data

• Enquiry and contact data is retained for up to 24 months from the date of last contact, unless a certification engagement commences.
• Certification and audit records are retained for a minimum of 10 years from the date of the relevant audit, in accordance with our obligations as a certification body.
• Marketing preferences and consent records are retained until you withdraw consent or request deletion.
• We review data retention periodically and securely delete data that is no longer required.

International Transfers

• UAEC operates from the United Kingdom and Australia. Data may be processed in either location as part of our normal operations.
• The UK and Australia maintain data protection frameworks that meet internationally recognised standards.
• Where data is transferred to third-party service providers outside these jurisdictions, we ensure appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms.

Your Rights

Depending on your location, you may have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete personal data.
• Right to erasure — to request that we delete your personal data, subject to our legal and regulatory retention obligations.
• Right to restriction — to ask us to restrict the processing of your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format where technically feasible.
• Right to object — to object to processing based on legitimate interests, or to the use of your data for direct marketing.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Cookies

• Our website uses cookies — small text files stored on your device — to enable certain website functions and to collect anonymised analytics data.
• Essential cookies are required for the website to function and cannot be disabled.
• Analytics cookies help us understand how visitors use the site. This data is anonymised and used only to improve our website.
• We do not use cookies for advertising or tracking purposes.
• You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the website.

Changes to This Policy

• We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or our services.
• The date of the most recent update is shown at the top of this page.
• Where changes are material, we will notify existing clients and contacts by email.
• We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: