Skip to content

Privacy Policy

Last updated: 21 October 2026

This notice explains how ConformTest uses personal information when you visit conformtest.com, contact us, request a quotation or use our testing and conformity-assessment support services.

1. Who is responsible for your information?

CONFORMTEST LTD, company number 17160066, trading as ConformTest, is the controller of the personal information described in this notice. Our business contact address is 124 City Road, London, EC1V 2NX, United Kingdom. Contact us at info@conformtest.com or +44 7760 682877. Please mark privacy enquiries “Privacy”.

This notice covers the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, including by the Data (Use and Access) Act 2025.

2. Information we collect and where it comes from

  • Enquiries: your name, email address, company, optional telephone number and the message you provide through our contact form, email, telephone or WhatsApp.
  • Client work: business contact details, instructions, correspondence, quotations, contracts, billing records and personal information included in product or technical documents supplied for the agreed project.
  • Website operation: technical information such as IP address, browser, device, requested pages and security or server logs processed by our hosting and delivery services.
  • Optional website measurement: cookie identifiers, page visits, device information and advertising interactions where you enable the relevant cookie category. See our Cookie Policy.
  • Other sources: a colleague or client may provide your business contact details for a project. Where we obtain personal information indirectly, we provide the required privacy information, subject to applicable legal exceptions.

The contact form requires a name, valid email address and message so we can respond. Company and telephone are optional. You do not have to provide information, but without sufficient contact details or instructions we may be unable to handle your request. Do not include passwords, payment-card details, identity documents, health information or unnecessary personal information about other people. Ask us to agree a suitable transfer method before sending confidential technical files.

3. Why we use information and our lawful bases

  • Answering enquiries and preparing quotations: steps you request before a contract where you are the prospective contracting party; otherwise our legitimate interests in communicating with business representatives and assessing service requests.
  • Delivering agreed services: performance of our contract with you, or our legitimate interests in delivering a contract with the organisation you represent.
  • Administration, billing and records: contract, applicable legal obligations (including accounting and tax requirements), and legitimate interests in managing our business and resolving disputes, as appropriate to the record.
  • Website security and abuse prevention: legitimate interests in operating a secure, reliable service and protecting users and our business. We consider the impact on your rights when relying on legitimate interests.
  • Optional analytics and advertising technologies: your consent, which you can withdraw through Cookie settings.
  • Privacy requests and complaints: compliance with our data-protection obligations.

Sending an enquiry does not subscribe you to marketing or authorise disclosure to unrelated businesses for their marketing. If we introduce optional email marketing subscriptions, we will offer a separate choice and an easy way to unsubscribe. Necessary replies and project communications are separate from marketing.

4. Who receives information?

Access is limited to people and organisations that need the information for the relevant purpose. Depending on your interaction, these may include:

  • Our authorised team members and personnel supporting your enquiry or project.
  • WordPress.com/Automattic and its service providers for hosting, website delivery, security and relevant website functionality; email-delivery and mailbox providers for receiving and responding to messages.
  • Google for Analytics and Ads when the corresponding optional cookie categories are enabled.
  • Testing laboratories, technical specialists or assessment partners where their involvement is needed for an agreed service. We limit the information shared to what they need and explain relevant project arrangements before work is agreed.
  • Accountants, legal advisers, insurers, regulators, courts or public authorities where necessary for professional advice, a legal obligation or establishing, exercising or defending legal claims.

We do not sell contact-form submissions. Service providers acting on our behalf must process information under appropriate contractual instructions and safeguards. Some recipients, such as professional advisers or third-party platforms, may act as independent controllers for their own processing.

Our embedded Google Map is off until you enable Optional features in Cookie settings. Loading it sends connection, device and interaction information to Google, which may use its own cookies. You can withdraw this choice through Cookie settings or use the direct Google Maps link instead. See our Cookie Policy and Google Privacy Policy.

If you choose a WhatsApp, Google Maps or LinkedIn link, you leave our website and the relevant provider’s own privacy terms apply. WhatsApp messages are handled by WhatsApp/Meta as well as by us when we respond. You can use email or the contact form instead.

5. International processing

Our website, communications and optional Google services may involve processing outside the United Kingdom, including in the United States and other countries where providers operate. A restricted transfer must be covered by a lawful UK transfer mechanism, such as applicable UK adequacy regulations or appropriate contractual safeguards, with the required assessment and supplementary protections where needed. These may include the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Contact us for information about the safeguards relevant to your information or how to obtain a copy.

6. How long information is kept

Retention depends on the purpose and record rather than one period for all information:

  • Enquiries that do not become projects: while needed to respond, complete reasonable follow-up and deal with any outstanding issue. They should then be deleted or anonymised when no longer needed.
  • Project and contractual records: for the duration of the work and any necessary period afterwards, taking account of the agreed scope, relevant product-documentation duties, professional obligations and applicable claim periods. A product’s technical-file retention rule does not automatically justify retaining every personal contact detail for the same period.
  • Financial records: for the periods required by applicable tax and accounting rules.
  • Privacy requests, complaints and security records: as necessary to handle the matter, demonstrate our response and meet relevant legal requirements.
  • Cookie choices: normally six months. Other browser-storage durations are explained in the Cookie Policy. Browser-cookie lifetime and a provider’s server-side data retention are different.

Information needed for a specific legal hold or unresolved dispute may be retained longer. Backups may retain residual copies until the applicable backup cycle expires. Contact us if you need the retention criteria for a particular record.

7. Security and confidentiality

We use proportionate technical and organisational measures, including secure website connections and access restrictions. No online transmission or storage method is entirely risk-free. Share only information needed for the enquiry; confidential project data should be exchanged using a method agreed with us.

8. Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal information, or object to processing based on legitimate interests. You can object to direct marketing at any time. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal.

Contact info@conformtest.com or use the contact form and describe your privacy request or complaint in the message. We may ask for proportionate information to verify your identity. We normally respond to rights requests within one month, subject to lawful extensions or other applicable rules; we will explain any extension or refusal. Rights are not absolute and some information may need to be retained for legal reasons.

Our enquiry process does not make decisions with legal or similarly significant effects about you solely by automated means.

9. Questions and complaints

You can complain to us by email, post or through the contact form. Explain your concern and how we can contact you; do not send identity documents unless requested through an appropriate channel. We will acknowledge a data-protection complaint within 30 days, investigate and respond without undue delay, keeping you informed as appropriate.

You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Contacting us first does not remove that right.

10. Updates

We may update this notice when our services, processing or legal requirements change. The date above identifies this version. We will provide additional notice or seek new consent where required.

Cookie Policy · Terms of Service · Contact