Last updated: April 7th, 2026
This privacy notice explains how Certn (UK) Ltd. (“Certn”, “we”, “us”) collects, uses, and protects your personal data when you request an Enhanced DBS Check as a self-employed individual. This notice applies to individuals located in the United Kingdom, the European Economic Area (“EEA”), and Switzerland.
1. Data Controller and DPO
Certn, 5 New Street Square, London, EC4A 3TW, United Kingdom, is the data controller responsible for the processing of your personal data described in this notice. You may contact our Data Protection Officer at any time: [email protected].
2. Personal Data We Collect and Sources
We collect and process the following categories of personal data, provided by you, the DBS, police forces and identity verification providers:
- Identity information: Full name (including any former names or aliases), date of birth, place of birth, gender, national insurance number.
- Contact information: Current and previous addresses, email address, telephone number.
- Identity verification documents: Passport, driving licence, birth certificate, or other documents required under the DBS identity checking guidelines.
- Biometric data (where applicable): Facial biometric data collected during identity verification.
- Employment and role information: Details of the self-employed role for which you are requesting the check, including the type of regulated activity.
- Criminal offence data: Information contained in your Enhanced DBS Certificate, including data from the Police National Computer, relevant police force intelligence, and (where applicable) information from the children’s and/or adults’ barred lists maintained by the Disclosure and Barring Service.
Providing the personal data described above is a contractual requirement necessary for us to process your DBS check application. If you do not provide the required information, we will be unable to submit your application to the DBS.
3. Purposes of Processing and Legal Basis
| Purpose |
Legal Basis |
| Processing your DBS check application (including identity verification, submission to the DBS, delivering results, payment, customer support, and the DBS Update Service if enrolled) |
Performance of a contract; compliance with a legal obligation (DBS identity checking guidelines) |
| Processing facial biometric data for identity verification (where applicable) |
Your explicit consent |
| Processing criminal offence data |
Your explicit consent |
| Complying with obligations as a Registered Body under the Police Act 1997 and the DBS Code of Practice |
Compliance with a legal obligation |
| Maintaining required records |
Compliance with a legal obligation |
4. Recipients
We share your personal data with: the DBS (application submission and processing); police forces (as part of the enhanced check process); identity verification providers; payment processors; Certn group entities (for administration, IT support, and data hosting); and regulatory authorities (where required by law).
5. International Data Transfers
Your data may be processed in Canada, the United States, the United Kingdom, and the EEA. For transfers outside the UK/EEA/Switzerland to countries without an adequacy decision, we rely on Standard Contractual Clauses (and the ICO’s International Data Transfer Addendum for UK transfers) or other appropriate safeguards.
6. Data Retention
Your personal data will be retained for no more than three (3) years from the date of the report, unless law requires a shorter period or you request earlier deletion. Biometric data is deleted within 30 days of verification completion. Payment and transaction records are retained as required by applicable tax and accounting legislation.
7. Your Rights
Under the UK GDPR and EU GDPR, you have the right to: access, rectify, erase, restrict processing of, and port your personal data; and withdraw consent at any time (without affecting lawfulness of prior processing). Withdrawing consent during the application process may mean we cannot complete the check. To exercise any right, contact [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office.
8. Changes and Further Information
We may update this notice from time to time and will notify you of material changes by email or through our platform. Full details of how Certn handles personal data are at https://certn.co/privacy-policy/.