Privacy and Cookie Policy

1. Introduction

Compass Compliance Consulting ("we", "us", or "our") is committed to protecting your privacy and being transparent about how data is handled. This combined Privacy and Cookie Policy explains what personal data and automated technical information we collect, how we use it, how we use cookies (including Google Analytics), and your legal rights under UK data protection legislation.

2. Information We Collect

We collect information on our website through two methods: direct user submissions via our contact form, and automated analytics cookies.

A. Information You Provide Directly

When you submit our website contact form, we collect:

• Full name
• Advisory firm or organisation name
• Business email address
• Contact telephone number
• Primary area of interest (selected from our service menu)
• Case or project scope overview

B. Automated Information and Cookies

• Google Analytics: We use Google Analytics (Google LLC) to understand how visitors interact with our website. Google Analytics uses cookies to collect standard internet log information and visitor behaviour details in an aggregated, pseudonymised form (such as pages visited, time spent on pages, browser type, device type, and approximate geographic location). This service does not collect identifiable personal details such as your name or email address.
• Google Search Console: Technical information may be exchanged with Google when processing sitemap and indexing data via Google Search Console.

3. Cookie Policy

Cookies are small text files placed on your device to ensure websites function properly and to provide reporting data to site owners.

How We Use Cookies

• Strictly Necessary / Functional Cookies: Required for technical site performance, form delivery, and core security functions.
• Performance / Analytics Cookies:
  • Provider: Google Analytics
  • Purpose: Analyses site traffic and usage patterns to improve visitor experience.
  • Common Cookies Set: _ga (used to distinguish unique users; typically retained for up to 2 years), _ga_* (used to maintain session status).

Managing and Disabling Cookies

You can control, block, or delete cookies at any time through your web browser settings:

• Browser Settings: Adjust your browser preferences (such as Chrome, Edge, Safari, or Firefox) to reject cookies or notify you when a cookie is placed.
• Google Analytics Opt-Out: You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.

4. How We Use Your Information

We use the data collected strictly for the following purposes:

• Direct Enquiries: To respond to your enquiry, contact you regarding your stated area of interest or project, and deliver compliance consulting services.
• Website Optimisation: To evaluate aggregate site performance, troubleshoot technical faults, and optimise site navigation.

We do not use your information for unsolicited direct marketing, profile building, automated decision-making, or sale to third parties.

5. Third-Party Data Sharing

We share data only with third-party service providers strictly necessary to operate our website and process enquiries:

• Web3Forms: Contact form submissions are transmitted securely to Web3Forms to process and route enquiries directly to our inbox. Web3Forms retains form submission data for a maximum of 3 years before automatic deletion. Web3Forms does not sell your information or use it for marketing purposes.
• Google LLC: Analytics data collected via Google Analytics is processed by Google on our behalf in accordance with applicable data protection terms.
• Legal Obligations: We will not disclose your personal information to any other third parties unless required to do so by applicable law, regulation, or a valid court order.

6. Data Retention

• Contact Form Submissions: Retained only for as long as necessary to address your enquiry, fulfil consulting engagements, and comply with standard business and accounting record-keeping requirements.
• Analytics Data: Google Analytics retention periods for user-level and event-level data are configured in line with standard retention rules (typically up to 14 months) prior to automatic deletion.

7. Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you hold statutory rights regarding your personal data:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete details.
• Right to Erasure: Request that we delete your personal information where there is no ongoing legal ground for retention.
• Right to Restriction or Objection: Object to or restrict specific processing activities.

To exercise any of these rights, please contact our Data Protection lead at the email address below.

8. Contact Us

For questions regarding this Privacy and Cookie Policy, or to exercise your statutory data protection rights, please contact:

Compass Compliance Consulting
Email: [email protected]