Effective Date: 15 July 2025
Company: Compass Insights Ltd
Company Number: 15324449
Address: 5 Bina Gardens, London, United Kingdom
1. Introduction
Welcome to Compass Insights Ltd’s Privacy and Data Protection Policy (“Privacy Policy”). At Compass Insights Ltd (“we”, “us”, or “our”) we are committed to protecting and respecting your privacy and Personal Data in compliance with the United Kingdom General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and all other mandatory laws and regulations of the United Kingdom.
This Privacy Policy explains how we collect, process, and keep your data safe. It will also tell you about your privacy rights and how the law protects you.
The individuals from whom we may gather and use data can include customers and any other people that we have a relationship with or may need to contact. This Privacy Policy is supplemented by our Customer Privacy Notice, which provides specific information on how we handle personal data relating to customers.
1.1 Your Data Controller
Compass Insights Ltd is your Data Controller and responsible for your Personal Data. We are not obliged by the UK GDPR to appoint a data protection officer and have not voluntarily appointed one at this time. Any inquiries about your data should be sent to us by email at contact@compassinsights.uk or by post to our address above.
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.
1.2 Processing Data on Behalf of a Controller
In discharging our responsibilities as a Data Controller, we have employees who will deal with your data on our behalf (“Processors”). The Data Controller and our Processors have the following responsibilities:
- Ensure that all processing of Personal Data is governed by one of the legal bases laid out in the UK GDPR.
- Ensure that authorised Processors are bound by confidentiality obligations.
- Implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.
- Assist with data subject rights requests.
- Maintain records of processing activities.
- Cooperate with supervisory authorities when required.
- Notify the Controller without undue delay after becoming aware of a Personal Data Breach.
2. Legal Basis for Data Collection
2.1 Types of Data We Collect
“Personal Data” means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of Personal Data about you, including:
- Profile/Identity Data: first name, last name, gender, date of birth.
- Contact Data: phone numbers, addresses, email addresses.
- Technical Data: IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use.
We do not collect any Special Categories of Personal Data or information about criminal convictions and offences.
2.2 Legal Basis for Processing
We rely on the following legal bases:
- Consent: for example, when you opt in to receive marketing communications.
- Contractual Obligations: when we need data to fulfil a contract with you.
- Legal Compliance: when we are required by law to process your data.
- Legitimate Interest: when it is necessary for our legitimate business interests and does not override your rights.
3. How We Use Your Personal Data
We will only use your Personal Data when the law allows us to. We may use your data to provide our services, manage our relationship with you, and comply with legal obligations.
3.1 Marketing Communications
You will receive marketing communications if you have created an account and opted in. You can opt out at any time.
3.2 Change of Purpose
We will only use your Personal Data for the purposes we collected it for unless we reasonably consider we need to use it for another purpose that is compatible. If we need to use your data for an unrelated purpose, we will notify you and explain the legal basis.
4. Your Rights
Under certain circumstances, you have rights under data protection laws regarding your Personal Data:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to object
- Right to restrict processing
- Right to data portability
If you wish to exercise any of these rights, please contact us at contact@compassinsights.uk.
4.1 Security Measures
We implement certain security measures to ensure the security of your Personal Data, including adopting secure hosting, using HTTPS encryption, maintaining up-to-date website software, and limiting access to authorised personnel.
While we strive to protect your Personal Data, no transmission over the internet is guaranteed to be completely secure.
4.2 Opting Out of Marketing
We provide an unsubscribe link in all marketing emails, allowing you to opt out of future communications at any time.
5. Sharing Your Data
We may share your Personal Data in the event of a business transfer or as required by law. We may also share it with third parties in connection with licensing our technology. We do not control third-party websites linked on our site, and we encourage you to review their privacy policies.
6. Data Retention
We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for legal, accounting, or reporting requirements.
7. International Transfers
Your information may be stored and processed in the UK, US, or other countries where we have facilities. By using our services, you consent to these transfers.
8. Changes to This Policy
We keep our Privacy Policy under review and will post any updates on this page. By continuing to use our services, you accept any changes to this policy.
9. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at contact@compassinsights.uk.