Privacy Policy
Last updated: January 9, 2026
Introduction
COMPLaiNCE ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our regulatory compliance advisory services. We operate in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for European clients and other relevant jurisdictions where we provide services.
1. Information We Collect
1.1 Personal Information
We collect personal information that you voluntarily provide to us when you express interest in obtaining information about us or our services, participate in activities on our website, or otherwise contact us. The personal information we collect may include name, email address, company name, phone number, job title, and any other information you choose to provide when submitting inquiries through our contact forms.
1.2 Automatically Collected Information
When you visit our website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. We also collect information about your browsing behavior, including pages viewed, links clicked, and other actions taken on our website. This information is collected through cookies, web beacons, and similar tracking technologies.
1.3 Professional and Business Information
When engaging our compliance advisory services, we may collect additional professional information relevant to your regulatory needs, including details about your business operations, jurisdictional requirements, compliance history, and specific regulatory challenges. This information is collected solely for the purpose of providing tailored compliance solutions.
2. How We Use Your Information
We use the information we collect or receive to communicate directly with you, respond to your inquiries, provide you with updates and information about our services, and deliver targeted marketing communications that may be of interest to you. We analyze usage patterns to improve our website functionality and user experience, maintain the security and integrity of our systems, and comply with legal obligations and regulatory requirements.
For clients engaging our professional services, we use your information to assess your compliance needs, develop customized regulatory strategies, provide expert advisory services, prepare compliance documentation and reports, and maintain ongoing communication regarding regulatory developments affecting your business.
We process your personal data on the following legal bases: your consent when you voluntarily provide information, contractual necessity when performing services you have engaged us for, legitimate interests in operating and improving our business while respecting your privacy rights, and legal obligations when required to comply with applicable laws and regulations.
3. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances: with service providers who assist us in operating our website and conducting our business, subject to confidentiality obligations; with professional advisors such as lawyers, auditors, and insurers where necessary for professional services; with regulatory authorities when required by law or to protect our legal rights; and in connection with a business transaction such as a merger, acquisition, or sale of assets, where your information may be transferred as part of that transaction.
Given the nature of our compliance advisory services, we maintain strict confidentiality protocols. Any information shared with third-party experts or regulatory bodies is done only with your explicit consent or as required by applicable law, and always in accordance with professional standards governing attorney-client privilege and confidentiality where applicable.
4. Data Security
We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, regular security assessments and audits, access controls and authentication procedures, secure data storage infrastructure, and employee training on data protection and confidentiality.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorized access to your information.
5. International Data Transfers
As a compliance advisory firm serving clients across multiple jurisdictions including the European Union, United States, Latin America, and Asia-Pacific regions, your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your jurisdiction.
When we transfer personal data from the European Economic Area to other countries, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, adequacy decisions recognizing equivalent data protection standards, and binding corporate rules where applicable. We ensure that all international transfers comply with applicable data protection regulations and maintain the security and confidentiality of your information.
6. Your Data Protection Rights
Depending on your location and applicable law, you may have the following rights regarding your personal information:
Right of Access: You have the right to request copies of your personal data and information about how we process it.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure: You have the right to request deletion of your personal data under certain circumstances, subject to legal retention requirements.
Right to Restrict Processing: You have the right to request that we limit the processing of your personal data under certain conditions.
Right to Data Portability: You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to our processing of your personal data for direct marketing purposes or based on legitimate interests.
Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframes required by applicable law, typically within 30 days. You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal data appropriately.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small data files placed on your device that enable us to recognize your browser and capture certain information. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted or expired).
The types of cookies we use include essential cookies necessary for website functionality, analytics cookies to understand how visitors interact with our website, and marketing cookies to deliver relevant advertisements. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period varies depending on the nature of the information and the purpose for which it was collected.
For prospective clients and website visitors, we typically retain contact information for up to three years from our last interaction unless you request earlier deletion. For active and former clients, we retain professional records in accordance with applicable professional standards and legal requirements, which may require retention for seven years or longer depending on jurisdiction and the nature of services provided. When we no longer need your personal information, we will securely delete or anonymize it.
9. Third-Party Links
Our website may contain links to third-party websites, including regulatory authorities, industry publications, and professional resources. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected through our website and in connection with our services.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information from our servers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.
For significant changes that materially affect your rights, we will provide more prominent notice, such as email notification to registered users or a notice on our homepage. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website and services after any changes indicates your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We are committed to resolving any privacy concerns you may have and will respond to your inquiry within a reasonable timeframe, typically within 30 days.
13. Jurisdiction-Specific Provisions
13.1 European Union (GDPR)
For individuals in the European Economic Area, we process your personal data in compliance with the General Data Protection Regulation (GDPR). Our legal basis for processing includes consent, contractual necessity, legitimate interests, and legal obligations. You have the right to lodge a complaint with your supervisory authority and to request information about international data transfers.
13.2 United States
For U.S. residents, we comply with applicable federal and state privacy laws. California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.
13.3 Other Jurisdictions
We comply with applicable data protection laws in all jurisdictions where we operate, including but not limited to the UK Data Protection Act, Brazil's LGPD, and other regional privacy regulations. If you have jurisdiction-specific questions, please contact us for more information.
This Privacy Policy is effective as of January 9, 2026, and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.