Privacy Policy

Last Updated: 20 April 2026

1. Who we are

This website is operated by COMPLIANCE 100 LTD. We are the data controller for the personal data collected through this website.

Company number: 11789215
Registered office: 3 The Mill, Stuart Works, High Street, Stourbridge, England, DY8 4FA

Email: [email protected].uk
Phone: 0121 769 1959

This Privacy Policy explains how we collect, use, store and protect your personal data when you:

visit our website;
contact us;
submit an enquiry;
request information about our services; or
sign up to receive updates from us.

2. The personal data we collect

Depending on how you use the website, we may collect:

your name;
your company name;
your email address;
your telephone number, where you provide it;
the service you are interested in;
the contents of your message or enquiry;
your marketing preferences, where you sign up for updates;
technical information such as your IP address, browser type, device information, pages visited, and dates and times of access; and
information collected through cookies or similar technologies used to operate, secure and improve the website.

We ask that you do not send sensitive or special category personal data through the website unless it is strictly necessary and we have asked you to provide it.

3. How we use your personal data

We may use your personal data to:

respond to your enquiries and contact requests;
provide information about our services;
prepare proposals or quotations, or take steps at your request before entering into a contract;
manage our relationship with you or your organisation;
send updates or marketing communications where you have asked to receive them or where we are otherwise legally permitted to do so;
operate, maintain, secure and troubleshoot the website;
keep business records and administer our operations;
comply with legal and regulatory obligations; and
establish, exercise or defend legal claims.

4. Our lawful bases for processing

Under UK data protection law, we rely on one or more of the following lawful bases:

Legitimate interests
We process personal data where it is necessary for our legitimate interests in operating and improving our business, responding to enquiries, managing relationships, maintaining records, and keeping our website secure and functioning properly, provided those interests are not overridden by your rights and interests.

Contract, or steps prior to entering into a contract
Where you contact us to request services, a quotation, or further information with a view to engaging us, we may process your personal data to take steps at your request before entering into a contract or to perform a contract.

Consent
Where required, we rely on your consent. This may include, for example, sending marketing emails to individuals where consent is required, or using non-essential cookies if these are introduced on the website.

Legal obligation
We may process your personal data where necessary to comply with legal, regulatory or statutory obligations.

5. Marketing communications

If you sign up to receive updates from us, we may use your email address to send you news, insights, service updates and related marketing communications.

You can unsubscribe at any time by using the unsubscribe link in any marketing email or by contacting us using the details set out in this policy.

Where the law requires consent for electronic marketing, we will only send such communications where that consent has been given.

6. Who we share your personal data with

We may share personal data, where necessary, with trusted third parties such as:

website hosting and IT service providers;
website support, development and maintenance providers;
email and communications providers;
CRM, form handling or administrative support providers;
professional advisers, such as legal, compliance and accounting advisers;
regulators, law enforcement bodies or courts, where required; and
prospective buyers or successors in connection with a business sale, merger or restructuring.

Where third parties process personal data on our behalf, we require them to do so only on our instructions and to keep it secure.

7. International transfers

Some of our third-party service providers may process personal data outside the UK.

Where this happens, we will ensure that appropriate safeguards are in place to protect your personal data, as required by UK data protection law. This may include relying on UK adequacy regulations or approved contractual safeguards.

If you would like further information about any international transfers we make, or a copy of the relevant safeguards where applicable, please contact us using the details in this policy.

8. How long we keep your personal data

We keep personal data only for as long as reasonably necessary for the purposes set out in this policy. In general:

website enquiries may be kept for up to 24 months after our last meaningful contact with you;
marketing subscription data may be kept until you unsubscribe, withdraw consent, or until we determine that the information is no longer current or necessary;
records relating to contracts or projects may be kept for up to 6 years after the end of the relevant relationship, or longer where legally required or where necessary in connection with legal claims; and
technical and security logs are typically kept for up to 12 months, unless we need to retain them for longer for security, investigation or legal reasons.

We may delete or anonymise personal data sooner where it is no longer needed.

9. Your rights

Subject to the law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request erasure of your personal data;
request restriction of processing;
object to processing carried out on the basis of legitimate interests;
request transfer of your personal data in a portable format in certain circumstances; and
withdraw consent at any time where we rely on consent.

To exercise any of these rights, please contact us using the details below.

10. Complaints

If you have any concerns about how we use your personal data, please contact us first and we will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK regulator for data protection matters. Details of how to make a complaint are available on the ICO website.

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission over the internet, and no method of electronic storage, is completely secure. For that reason, we cannot guarantee absolute security.

12. Cookies

We use cookies and similar technologies to operate, secure and improve the website.

For more information about the cookies we use, please see our Cookie Policy.

13. Third-party websites

This website may contain links to third-party websites. We are not responsible for the privacy practices, content or security of those websites.

You should read their own privacy and cookie policies before providing any personal data.

14. Children

This website is intended for business users and is not directed at children. We do not knowingly collect personal data from children through this website.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the “Last updated” date at the top of this page will be revised.

16. Contact us

If you have any questions about this Privacy Policy or how we handle personal data, please contact us:

COMPLIANCE 100 LTD
3 The Mill, Stuart Works, High Street, Stourbridge, England, DY8 4FA
Email: [email protected].uk
Phone: 0121 769 1959