Privacy Policy

Overview

Complyra GRC ("Complyra," "we," "us," or "our") is committed to protecting your privacy and ensuring transparency in how we collect, use, and safeguard your personal information. This Privacy Policy applies to our website at complyragrc.com and all related services we provide.

By using our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy. We encourage you to review this policy periodically, as we may update it to reflect changes in our practices or applicable laws.

Information We Collect

We collect information in several ways to provide and improve our services:

Information You Provide

• Contact Information: Name, email address, phone number, and company name when you fill out our contact forms or request a consultation.
• Professional Information: Job title, role, and organizational details relevant to our GRC consulting services.
• Communication Records: Content of emails, messages, or other communications you send to us.
• Service-Related Information: Details you share during consulting engagements, including business requirements and project specifications.

Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths.
• Network Information: IP address, approximate geographic location, and internet service provider.
• Referral Data: The website or source that directed you to our site.

How We Use Information

We use the information we collect for the following purposes:

• Service Delivery: To respond to inquiries, schedule consultations, and deliver our GRC consulting services.
• Communication: To send you relevant information about our services, including updates, insights, and resources related to governance, risk, and compliance.
• Website Improvement: To analyze usage patterns and optimize our website's performance, content, and user experience.
• Security: To detect, prevent, and address technical issues, fraud, or security threats.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Business Operations: To support internal operations, including analytics, auditing, and research to improve our services.

Cookies & Analytics

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical insights.

Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, such as maintaining your session and security features.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data.
• Preference Cookies: Remember your settings and preferences to provide a personalized experience.

Analytics Services

We use Google Analytics 4 (GA4) to collect and analyze website usage data. GA4 uses first-party cookies to measure user interactions in an anonymized and aggregated manner. This data helps us understand traffic sources, popular content, and user behavior patterns. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by adjusting your cookie preferences through our cookie consent banner when available. For more information about how Google processes data, please visit Google's Privacy Policy.

Sharing of Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party vendors who assist us in operating our website, conducting business, or servicing you, provided they agree to keep your information confidential.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Protection: To protect our rights, privacy, safety, or property, and that of our clients or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with appropriate notice provided.
• With Your Consent: When you have explicitly authorized us to share your information for a specific purpose.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the data and our legal obligations. Contact information submitted through our website is typically retained for the duration of any business relationship and for a reasonable period afterward for follow-up and record-keeping purposes. When data is no longer needed, we securely delete or anonymize it.

Data Security

We take data security seriously and implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using SSL/TLS protocols, secure hosting infrastructure, access controls limiting data access to authorized personnel, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information. We honor these rights regardless of your specific jurisdiction:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
• Right to Restrict Processing: You may request that we limit how we use your personal information.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used format.
• Right to Object: You may object to certain types of processing, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@complyragrc.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Third-Party Links

Our website may contain links to third-party websites, services, or resources that are not owned or controlled by Complyra. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of any link does not imply endorsement by Complyra of the linked site or its content.

Children's Privacy

Our website and services are designed for business professionals and are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us immediately at privacy@complyragrc.com, and we will take steps to delete such information from our systems.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or through a prominent notice on our website. We encourage you to periodically review this page for the latest information on our privacy practices.