Privacy Policy
Last updated: 15 September 2026
1. Who We Are
LLOYDS RESEARCH COMPANY LTD is a research-led company engaged in research, technical analysis, the development and administration of documented assessment schemes, and the evaluation of organisations, individuals, activities, services and products.
For the purposes of applicable data protection law, LLOYDS RESEARCH COMPANY LTD is the controller of the personal data described in this Privacy Policy.
Company number: 14449294
Registered office: B69, Capital House, 61 Amhurst Road, London, England, E8 1LL
Email: info@lloydsun.com
This Privacy Policy explains how we collect, use, store, disclose and protect personal data obtained through our website, forms, applications, enquiries, assessment activities and related communications.
2. Personal Data We May Collect
Depending on the nature of an enquiry, application or assessment, we may collect:
* names, job titles and contact details;
* identity and registration information;
* information about an organisation, business, branch, facility or activity;
* postal, operational and registered addresses;
* information about services, products, qualifications, experience or declared activities;
* application, assessment and certificate information;
* documents and evidence submitted for review;
* correspondence, enquiries, feedback and complaint records;
* payment, invoice and transaction information;
* website usage, device, browser, IP address and cookie information; and
* any other information voluntarily provided to us or reasonably required for the relevant request.
We aim to collect only information that is relevant and proportionate to the purpose for which it is required.
3. How We Collect Personal Data
We may collect personal data:
* directly from an individual or organisation;
* through website forms, applications and uploaded documents;
* through email, telephone or other communications;
* during document reviews, interviews, observations, visits or assessments;
* from an authorised representative;
* from publicly available registers or other lawful public sources; and
* through essential website technologies and, where permitted, optional cookies or analytics tools.
4. How We Use Personal Data
We may use personal data to:
* respond to enquiries and consultation requests;
* identify applicants and verify submitted information;
* administer registration records and applications;
* conduct research, technical analysis and documented assessments;
* develop, apply and review assessment schemes and criteria;
* evaluate submitted documents and supporting evidence;
* communicate findings, decisions, corrective actions or renewal requirements;
* issue, administer and verify registration records, reports and certificates;
* provide training-related or recognition documents where applicable;
* maintain the integrity, security and traceability of issued records;
* manage payments, accounts and contractual arrangements;
* investigate complaints, misuse, suspected fraud or unauthorised representations;
* improve our website, processes, research methods and services; and
* comply with legal, regulatory and record-keeping obligations.
We do not use information submitted for one purpose in an incompatible manner without an appropriate lawful basis.
5. Lawful Bases for Processing
Depending on the circumstances, we may process personal data because:
* processing is necessary to take steps at the applicant’s request or to perform a contract;
* we must comply with a legal obligation;
* processing is necessary for our legitimate interests or those of another party, provided that the individual’s rights and interests do not override those interests; or
* the individual has given valid consent for a specific purpose.
Where we rely on consent, it may be withdrawn at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
6. Public Verification of Records and Certificates
Where a registration record, assessment result or certificate has been issued, limited information may be displayed through the online verification service to allow the document and its current status to be checked.
Depending on the type of record, the verification result may show:
* the holder’s or organisation’s name;
* the relevant branch, facility or location;
* the registration or certificate number;
* the document type;
* the scheme, assessed subject or stated scope;
* the issue and expiry dates, where applicable;
* the level or rating awarded, where applicable; and
* the current status of the record or certificate.
We do not intend to publish identity documents, personal contact details, uploaded evidence, assessment working papers or other information that is not necessary for public verification.
A limited verification record may remain available after expiry, suspension or withdrawal where this is necessary to preserve traceability and reduce the risk of misleading or fraudulent use.
7. Sharing Personal Data
We may share personal data only where reasonably necessary with:
* employees, authorised personnel, assessors or professional advisers;
* website, hosting, information-technology, payment or document-management providers;
* laboratories, technical specialists or other service providers involved in an authorised assessment, where applicable;
* public authorities, courts, regulators or law-enforcement bodies where disclosure is legally required; and
* another party where the individual has authorised the disclosure or it is otherwise permitted by law.
Service providers are expected to process personal data only for authorised purposes and to apply appropriate confidentiality and security measures.
We do not sell personal data.
8. International Data Transfers
Some service providers or authorised parties may process information outside the United Kingdom. Where an international transfer is made, we will take reasonable steps to ensure that an appropriate legal transfer mechanism and suitable safeguards are used where required by applicable law.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the relevant purpose, including legal, contractual, accounting, security, verification and dispute-resolution requirements.
Unless a longer period is required or justified:
* general enquiries that do not proceed may normally be retained for up to 24 months after the last meaningful contact;
* closed or unsuccessful application records may normally be retained for up to 24 months;
* application evidence, assessment records and certificate-related records may normally be retained for the period of validity and for up to six years afterwards;
* financial and transaction records are retained for the period required by applicable law; and
* limited public verification information may be retained for longer where necessary to preserve the history and authenticity of an issued record.
Information that is no longer required will be securely deleted, anonymised or otherwise disposed of appropriately.
10. Data Security
We use reasonable organisational and technical measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access to application evidence and assessment records should be restricted to authorised persons with a legitimate operational need. However, no internet transmission or storage system can be guaranteed to be completely secure.
11. Cookies and Similar Technologies
Our website may use essential cookies required for security, functionality and the operation of requested services.
If analytics, advertising or other non-essential cookies are used, visitors must be given clear information and an appropriate opportunity to accept, reject or manage those cookies before they are activated, where consent is required.
The actual cookies and external technologies used by the website should be reviewed periodically so that the information presented to visitors remains accurate.
12. Individual Rights
Subject to applicable law, an individual may have the right to:
* request access to their personal data;
* request correction of inaccurate or incomplete information;
* request deletion of personal data in certain circumstances;
* request restriction of processing;
* object to certain processing;
* request the transfer of eligible data;
* withdraw consent where processing is based on consent; and
* complain to the Information Commissioner’s Office.
These rights are not absolute and may be limited where retention or processing is required by law or justified for another lawful reason.
Requests may be sent to info@lloydsun.com. We may need to verify the requester’s identity before responding.
13. Automated Decision-Making
We do not intend to make decisions that produce legal or similarly significant effects solely through automated processing without appropriate human involvement and the safeguards required by law.
14. Information Relating to Children
Our general services are not directed to children acting independently as applicants. Where information concerning a child or young person is submitted for a legitimate purpose, it must be provided by, or with the authority of, a parent, guardian or other person legally authorised to act on their behalf.
15. Third-Party Websites
Our website may contain links to independent external websites. We are not responsible for the privacy practices, security or content of those websites. Visitors should review the privacy information provided by the relevant third party.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our activities, website, processes, technologies or legal obligations. The latest version will be published on this page with its revision date.
17. Contact and Complaints
Questions, requests or complaints concerning personal data may be sent to:
LLOYDS RESEARCH COMPANY LTD
B69, Capital House
61 Amhurst Road
London, England
E8 1LL
United Kingdom
Email: info@lloydsun.com
Individuals may also submit a complaint to the UK Information Commissioner’s Office:
https://ico.org.uk/