Privacy Policy

ComplianceScan ("ComplianceScan," "we," "us," or "our") helps small and mid-sized businesses identify compliance readiness gaps. This Privacy Policy explains what information we collect when you visit compliancescan.com or request a compliance readiness scan, how we use it, and the choices you have. We take privacy seriously — it would be a poor look for a compliance business not to.

1. Who we are

ComplianceScan is a compliance advisory service operated from the United States. For any privacy question, or to exercise the rights described below, contact us at info@compliancescan.com.

2. Information we collect

Information you give us

When you submit the readiness-scan request form, we collect the details you enter, which may include:

• Your name, work email address, and phone number
• Your company name and website
• Your industry, company size, primary compliance concern, and timeline
• Any context you provide about what triggered your request

If you email us directly, we also keep the contents of that correspondence so we can respond and maintain a record of the engagement.

Information collected automatically

Like most websites, our hosting infrastructure may log standard technical data such as your IP address, browser type, referring page, and the date and time of your visit. This is used for security and to keep the site running reliably.

We do not ask for sensitive documents, protected health information, cardholder data, or other regulated records through the intake form. Those are only ever requested later, directly and with agreed handling expectations, if a paid engagement proceeds.

3. How we use your information

We use the information you provide to:

• Prepare and deliver your compliance readiness scan and its summary
• Respond to your request and follow up about next steps
• Provide the paid services you engage us for (Readiness Snapshot, Audit Prep, remediation, and related work)
• Operate, secure, and improve our website and services
• Meet our own legal, tax, and record-keeping obligations

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not sell it.

4. Why we are allowed to use it

Where required by law (for example, under the EU/UK GDPR), we rely on one or more of the following legal bases: your consent (which you give when submitting the form), the need to take steps at your request before entering a contract and to perform that contract, our legitimate interests in responding to inquiries and running our business, and compliance with legal obligations.

5. When we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with:

• Service providers who help us operate — for example, our web hosting, workflow-automation, and email providers — and only to the extent needed to perform those services for us.
• Professional advisors such as accountants or lawyers, where reasonably necessary.
• Authorities or others when we are legally required to, or to protect our rights, safety, or property.
• A successor in the event of a merger, acquisition, or sale of assets, subject to this policy.

6. How long we keep it

We keep your information for as long as needed to fulfill the purposes above — to deliver your scan, manage any engagement, and meet our legal and record-keeping obligations. When it is no longer needed, we delete or anonymize it. You can ask us to delete your information sooner (see your rights below).

7. How we protect it

We use reasonable administrative, technical, and organizational measures to protect your information, including encryption in transit (HTTPS) and access controls. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to limit who can access it.

8. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access — request a copy of the information we hold about you
• Correction — ask us to fix inaccurate or incomplete information
• Deletion — ask us to delete your information
• Objection or restriction — ask us to stop or limit certain processing
• Portability — receive your information in a portable format
• Withdraw consent — where we rely on consent, withdraw it at any time
• Non-discrimination — we will not treat you differently for exercising these rights

To exercise any of these, email info@compliancescan.com. We will verify your request and respond within the timeframe required by applicable law. If you are in the EU/UK, you also have the right to complain to your local data-protection authority.

9. Cookies, analytics, and third-party content

We keep tracking to a minimum. We do not use advertising or cross-site tracking cookies, session-replay, or tracking pixels. We do use Google Analytics 4 to understand site traffic — but only after you consent. On your first visit a banner asks you to Accept or Reject; the analytics script loads only if you Accept, and your choice is remembered on your device. When it runs, analytics use IP anonymization and have Google advertising signals disabled. You can change your choice at any time using the "Cookie settings" control on the page.

Some pages also load fonts and images from third-party services (for example, Google Fonts and image hosts) so the site displays correctly; those providers may receive your IP address as a normal part of delivering that content. This consent-first approach is how we meet laws such as the California Invasion of Privacy Act (CIPA) and the EU/UK GDPR — we hold our own site to the standard we help clients meet. For the full detail on cookies and analytics, see our Cookie Policy.

10. Children's privacy

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be highlighted on this page. Your continued use of the site after an update means you accept the revised policy.

See also our Terms of Service.