Privacy Policy

Last Updated: 8 July 2026

CertMonitor ("we", "our", "us") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect information when you use the CertMonitor website and services ("Service").

This policy applies to visitors to our website, registered users, and customers who use the CertMonitor platform.

1. Who We Are

The data controller responsible for your personal data is CertMonitor.

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the contact details provided on the CertMonitor website.

2. Information We Collect

We collect information that is necessary to provide, maintain, and improve the Service.

Account Information

When you create an account, we may collect:

• Your name.
• Your email address.
• Your password (stored securely in an encrypted or hashed form).
• Your account preferences and settings.

Certificate Monitoring Data

When you use CertMonitor, we may collect information relating to the services and certificates you choose to monitor, including:

• Domain names and URLs you add to your account.
• Certificate expiry dates.
• Certificate issuer and metadata.
• Monitoring configuration and notification preferences.
• Certificate monitoring results and history.

We do not collect or store private keys associated with your certificates.

API and Usage Information

When you use our website, dashboard, command line tools, or API, we may collect:

• IP addresses.
• Browser and device information.
• API keys and authentication information.
• API request logs and usage statistics.
• System logs and error information.

Communication Information

If you contact us, we may collect information contained in your communications, including your email address and any information you provide when requesting support.

3. How We Use Your Information

We use your information to:

• Create and manage your account.
• Provide certificate monitoring services.
• Send certificate expiry and monitoring notifications.
• Provide customer support.
• Monitor service performance and security.
• Prevent abuse, fraud, and unauthorised access.
• Improve and develop the Service.
• Meet legal and regulatory obligations.

4. Legal Basis for Processing

Where UK data protection law applies, we process personal data using the following legal bases:

• Contract: where processing is necessary to provide the Service you have requested.
• Legitimate interests: where processing is necessary to operate, secure, and improve our Service.
• Consent: where you have given permission for specific processing activities.
• Legal obligation: where we are required to process information to comply with applicable laws.

5. How We Store and Protect Your Information

We take reasonable technical and organisational measures to protect your information against loss, misuse, unauthorised access, disclosure, or alteration.

These measures may include access controls, encryption, secure authentication mechanisms, monitoring, and regular security reviews.

However, no online service can guarantee absolute security, and you use the Service at your own risk.

6. Sharing Your Information

We do not sell your personal information.

We may share information with trusted third-party service providers where necessary to operate CertMonitor, including providers of:

• Cloud hosting infrastructure.
• Email delivery services.
• Payment processing services.
• Monitoring and analytics services.
• Customer support tools.

These providers are only permitted to process your information as required to provide services to us and are required to protect your information.

We may also disclose information where required by law, regulation, legal process, or to protect the rights, security, or property of CertMonitor, our users, or others.

7. Certificate and Domain Information

CertMonitor requires certain technical information in order to monitor certificates and provide alerts.

Information relating to monitored domains and certificates may be stored as part of your account history. You are responsible for ensuring you have appropriate authority to monitor any domains or services added to your account.

8. Cookies and Similar Technologies

We may use cookies and similar technologies to operate our website, maintain user sessions, remember preferences, and understand how users interact with our Service.

You can control cookies through your browser settings. Disabling cookies may affect some functionality of the Service.

9. Data Retention

We retain personal information only for as long as necessary to provide the Service, meet legal obligations, resolve disputes, and enforce agreements.

When your account is deleted, we will take reasonable steps to remove or anonymise personal information that is no longer required.

10. International Data Transfers

Some of our service providers may process information outside the United Kingdom.

Where personal data is transferred internationally, we take appropriate steps to ensure that suitable safeguards are in place in accordance with applicable data protection laws.

11. Your Rights

Depending on applicable law, you may have rights including:

• Accessing the personal data we hold about you.
• Requesting correction of inaccurate information.
• Requesting deletion of your personal information.
• Objecting to certain processing activities.
• Requesting restriction of processing.
• Requesting a copy of your data in a portable format.
• Withdrawing consent where processing is based on consent.

To exercise these rights, please contact us using the details provided on the CertMonitor website.

12. Marketing Communications

We may send service-related communications necessary for operating your account.

Where required, we will request your consent before sending promotional communications. You can unsubscribe from marketing communications at any time.

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties.

We recommend reviewing the privacy policies of any third-party services you use.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Service, legal requirements, or privacy practices.

Updated versions will be published on this page with a revised "Last Updated" date.

15. Contact Us

If you have questions about this Privacy Policy, your personal data, or your rights, please contact us using the contact details available on the CertMonitor website.