Privacy Policy

Sterling International Consulting (“Sterling”, “we”) is the personal information controller for this website, committed to the Data Privacy Act of 2012 (RA 10173), its IRR and National Privacy Commission issuances. Our Data Protection Officer is reachable at info@iso-certification.ph (subject line: “Data Privacy”) or +63 977 815 1204.

What we collect, and why

Enquiry and contact data — name, organisation, email, phone and your message, when you contact us or request an assessment: used to respond, scope and deliver services, including automated email follow-ups and phone calls about your enquiry — which you can stop at any time by telling us so or using the unsubscribe link in any message. Where we send you a link to our proposal application form, the information you provide there — organisation, scope and contact details — is used to prepare your proposal, collected through our group’s Effivity platform under the same protections, as pre-contract processing. Standards-alert subscriptions — your contact details and the standards you tell us you hold, when you join our ISO updates alert list: used solely to notify you when a status affecting those standards changes; unsubscribe in any message. Website usage data — pages visited, device and approximate location via cookies and analytics (see the Cookie Policy): used to improve the site. Engagement data — where you become a client, personal data within your organisation’s documents and records is processed under your engagement contract and confidentiality terms, only as instructed and only for the engagement. Clients also receive service communications during and after engagements — surveillance and audit reminders, and updates affecting their certifications, by email or phone — under contract and legitimate interest; non-essential communications stop on request.

Legal bases and sharing

We process on consent (subscriptions), contract and pre-contract steps (enquiries and engagements), and legitimate interests (following up enquiries you initiate, site security and improvement) — never outweighing your rights, and always with the ability to object. We do not sell personal data. Data may be shared within the Sterling group of companies — Sterling,, CyberVantage 360, Effivity Technologies and Vegam AI — for service delivery, and with vetted processors (hosting, analytics, email) under contractual safeguards. Where your engagement involves certification, attestation or assessment, relevant information is shared with the certification body, assessment body or third-party auditors involved — as the process requires and in your organisation’s interest; these bodies act independently under their own accreditation and legal duties. Where data transfers outside the Philippines within our group, we apply contractual protections consistent with the Data Privacy Act.

Retention and security

We keep personal data no longer than needed for the purposes above and any legal retention duties, then securely delete or anonymise it. Security controls are operated under our ISO/IEC 27001:2022-certified information security management system.

Your rights

Under the Data Privacy Act you may access, correct, object to, or request deletion of your personal data, withdraw consent, request data portability, and be informed of processing. Write to our DPO at info@iso-certification.ph; we respond within the periods the law provides. You may also lodge a complaint with the National Privacy Commission.

Effective 08 July 2026 · Reviewed annually · Replaces the version of September 2021.