Effective Date: 26 July 2026 Last Updated: 26 July 2026
1. About CERTKO
CERTKO is a certification and compliance solution platform owned and operated by Instacertify Labs Private Limited ("Instacertify"). CERTKO helps manufacturers and importers with information, guidance, search tools and digital resources relating to product standards, testing, certification and regulatory compliance.
CERTKO is not a certification body, testing laboratory or government authority unless expressly stated.
2. Scope
This Privacy Policy explains how personal information is collected, used, stored, shared and protected when you use the CERTKO platform (the "Platform"), including our website, tools and related digital services.
3. Information We Collect
Depending on how you use the Platform, we may collect:
- Contact details — such as name, email address and phone number
- Account information — credentials and profile details if you create an account
- Organization details — company name, role and related business information
- Communications — messages, enquiry forms and correspondence with us
- Technical data — IP address, device and browser information, and log data
- Cookies and usage analytics — as described in the Cookies section below
- Voluntarily submitted information — product details, documents or other data you choose to provide
4. Purpose of Processing
We process personal information to:
- Operate, maintain and improve the Platform
- Respond to enquiries and provide requested services
- Improve user experience and platform performance
- Comply with legal and regulatory obligations
- Prevent fraud, misuse and security incidents
- Maintain the integrity and security of our systems
5. Legal Basis
Where applicable law requires a legal basis, processing may be based on:
- Your consent
- Contractual necessity (to provide services you request)
- Our legitimate interests (such as operating and securing the Platform), balanced against your rights
- Legal obligations applicable to Instacertify
6. Cookies
CERTKO uses cookies and similar technologies to improve functionality, analytics and security.
- Necessary cookies — required for security, load balancing and basic site operation
- Analytics cookies — help us understand traffic (e.g. GA / GTM); loaded only with your consent when our consent banner is enabled
- Marketing cookies — optional; only if you opt in
You can manage preferences via the on-site cookie banner (footer → Cookie settings) or your browser. Disabling certain cookies may affect Platform features. See also What is GDPR and DPDP? and our data request form.
7. Data Sharing
Information may be shared with service providers, laboratories, certification partners or regulators only where necessary to operate the Platform, fulfil a request you make, or comply with law — and subject to contractual or legal safeguards.
We do not sell personal information.
8. International Transfers
Data may be processed across jurisdictions. Where transfers occur, we use appropriate safeguards consistent with applicable data-protection requirements.
9. Security
We implement administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse or alteration. No method of transmission or storage is completely secure; we continually improve our controls.
10. Data Retention
Information is retained only as long as necessary for the purposes described in this Policy, or as required for legitimate business, contractual or legal purposes. When retention is no longer required, we delete or anonymize the data where practicable.
11. Your Rights
Where applicable under local law, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate data
- Request deletion of your data
- Request restriction of processing
- Request portability of certain data
- Object to certain processing
To exercise these rights, contact us using the details below. We may need to verify your identity before responding.
12. Children's Privacy
The Platform is not intended for children under the applicable legal age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
13. Changes
This Policy may be updated periodically. The "Last Updated" date at the top of this page will reflect the latest revision. Continued use of the Platform after changes constitutes acceptance of the updated Policy, where permitted by law.
14. Contact
Privacy Officer
Instacertify Labs Private Limited
A-34, 4th Floor, Sector 63A, Noida, Gautam Buddha Nagar, Uttar Pradesh – 201301, India
Email: info@certko.com Phone: +91-9999118039
15. GDPR and India’s DPDP Act
CERTKO is operated from India by Instacertify Labs Private Limited. Depending on where you are and how we process your data:
- GDPR (EU / EEA / UK) — Where the EU General Data Protection Regulation (or UK GDPR) applies, we process personal data under a lawful basis such as consent, contract, legitimate interests or legal obligation. You may have rights of access, rectification, erasure, restriction, portability and objection. You may also lodge a complaint with your local supervisory authority.
- DPDP Act, 2023 (India) — Under India’s Digital Personal Data Protection Act, we act as a Data Fiduciary for personal data we determine the purpose and means of processing. You have rights to access, correction, erasure and withdrawal of consent (subject to the Act and rules). Grievances can be raised with our Privacy Officer and, where applicable, the Data Protection Board of India.
Cookie preferences can be managed via the site cookie banner. To exercise rights, use our data request form or email the Privacy Officer. Learn more: What is GDPR and DPDP?.