VEKIN (“we,” “us,” or “our”) is committed to protecting the privacy, security, and integrity of the personal information we process. As a Validation and Verification Body (VVB) certified under ISO 9001, 14001, 14065, 17029, 27001, and 29110 standards, we adhere to strict international frameworks that govern the quality, environmental, information security, and validation & verification management aspects of our operations. This Privacy Policy explains how we collect, use, disclose, and protect personal information obtained through our website, platforms, products, and services (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not access or use our Services.

‍

1. Information We Collect

‍

Personal Information:
We may collect personal information you provide directly to us, including but not limited to your name, contact information (such as email, phone number, and mailing address), organizational details, job title, and any other personal information you choose to provide when contacting us, subscribing to newsletters, creating an account, or using certain features of our Services.

Usage Information:
We automatically collect certain information when you use our Services. This may include details about how you access and interact with our website or platform (e.g., IP address, browser type, operating system, referring URLs, and pages visited). We may also use cookies, web beacons, and similar technologies to enhance your experience, track user engagement, and analyze site traffic.

Environmental and Sustainability Data:
As a VVB, we may process data related to your organization’s carbon footprint, emissions, sustainability initiatives, and related verification or validation documentation. While this information typically pertains to businesses or projects rather than individuals, it may be associated with personal information if you provide it.

‍

2. How We Use Your Information

‍

We use the information we collect for a range of business and operational purposes, including:
 • Service Delivery: To provide, maintain, and improve our Services, including performing validations, verifications, audits, and assessments related to environmental, carbon, and sustainability standards.
 • User Support: To respond to your inquiries, address technical issues, and provide customer service.
 • Communication: To send you updates, newsletters, marketing materials, or other information you have requested or that may be of interest to you, subject to your preferences.
 • Compliance and Governance: To comply with legal obligations, regulatory requirements, and the standards set by ISO 9001, 14001, 14065, 17029, 27001, and 29110.
 • Security and Integrity: To protect the security and integrity of our Services, detect and prevent fraud, enforce our Terms of Service, and ensure compliance with relevant policies and applicable laws.

‍

3. Legal Bases for Processing

‍

Depending on your location, we process your personal information in accordance with applicable data protection laws. Our legal bases may include:
 • Consent: Where you have given us explicit permission to process your personal data for a specific purpose.
 • Contractual Necessity: Where processing is necessary to provide you with our Services or perform a contract we have with you.
 • Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, and not overridden by your privacy rights.
 • Legal Obligations: Where processing is required to comply with applicable laws, regulations, or accreditation standards.

‍

4. Disclosure of Your Information

‍

We may share personal information with:
 • Service Providers: Trusted third-party vendors who perform services on our behalf (e.g., IT services, analytics providers, customer support). These service providers are contractually obligated to use the data only as necessary to provide their services to us.
 • Affiliates and Partners: Entities controlled by or under common control with VEKIN, as well as partner organizations involved in validation, verification, or sustainability initiatives.
 • Regulatory and Accreditation Bodies: We may disclose information to meet requirements of ISO certifications, accreditation audits, or when requested by governmental agencies to demonstrate compliance.
 • Legal Compliance and Protection: When required by law, regulation, or court order, or when necessary to protect our rights, users, systems, or the public.
 • Corporate Transactions: In the event of a merger, acquisition, asset sale, or other corporate transaction, your information may be transferred as part of that process.

‍

5. Data Security

‍

VEKIN’s ISO27001 certification underlines our commitment to robust information security practices. We implement a comprehensive Information Security Management System (ISMS) and employ physical, technical, and administrative safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Despite our best efforts, no security measure is completely foolproof, and we cannot guarantee absolute security.

‍

6. Data Retention

‍

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, including to comply with legal and regulatory obligations, maintain business records for accreditation under relevant ISO standards, and resolve disputes. When we no longer require the information for these purposes, we take steps to securely delete or anonymize it.