Privacy Policy

Information Security Commitment

Compliancy Group is committed to the highest standards of information security and is compliant with ISO27001, the international standard for information security management. This certification demonstrates our dedication to protecting your personal data through robust policies, procedures, and controls.

Lawful Basis for Processing

We process your personal data in accordance with UK GDPR requirements. The lawful bases for processing your data may include your consent, the necessity of processing for the performance of a contract, compliance with legal obligations, and our legitimate business interests in providing and improving our services.

Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data
• Restrict or object to our processing of your data
• Request the transfer of your data (data portability)
  To exercise any of these rights, please contact us using the details provided below.

International Data Transfers

Your personal data is stored and processed within the UK and EEA. If we ever need to transfer your data outside these regions, we will ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information.

Contact for Data Privacy Queries

For any questions or concerns about your personal data or this policy, please contact our Data Protection Lead at:
Email: hello@compliancygroup.co.uk
Address: Eastham Hall, 109 Eastham Village Rd, Eastham, Birkenhead, Wirral CH62 0AF

Children’s Privacy

Our website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Updates to This Policy

We may update this Data Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly to stay informed about how we protect your information.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, or until you request deletion. For example, enquiry data is typically retained for up to 12 months, while client account data is retained as long as you remain a client and for a period required by law thereafter.”