Last updated: 29 September 2026
Company Compass respects your privacy. This policy explains how we collect and use personal information when you visit companycompass.co, contact us, subscribe to communications, or enquire about or use our automation products and services.
1. Who We Are
Company Compass is a trading name of Company Compass Co.
That operator is the data controller responsible for the personal information covered by this policy.
For privacy questions or requests, contact info@companycompass.co.
2. Information We Collect
- Your name, email address and other contact details.
- Your company name, role and relevant business information.
- Information about the task you want to automate, the systems you use and your requirements.
- Messages, form submissions, attachments and support correspondence.
- Information needed to prepare proposals, manage contracts, issue invoices and administer payments.
- Your communication preferences and consent choices.
Website and technical information
Our website and hosting services may collect your IP address, browser and device information, pages requested, access times and error or security logs.
Where analytics or advertising tools are enabled, they may also collect information about visits, referral sources, clicks and conversions, subject to applicable consent requirements.
Information from other sources
We may receive information from authorised colleagues at your organisation, people who refer you to us, and providers involved in delivering our services or processing payments.
Please avoid sending passwords, sensitive personal information or confidential client records through general enquiry forms.
3. How and Why We Use Information
We use personal information for the following purposes, relying on the appropriate lawful basis under applicable law:
- Enquiries and proposals: to respond to requests, discuss requirements and prepare proposals. This may be necessary to take steps towards a contract at your request or serve our legitimate interest in handling business enquiries.
- Service delivery: to set up and administer agreed products and services, communicate with clients and provide agreed support. This may be necessary to perform a contract or manage our business relationship with an organisation you represent.
- Billing and records: to issue invoices, administer payments and maintain records. We rely on contractual requirements, legal obligations and our legitimate interest in managing our accounts, as applicable.
- Security and maintenance: to investigate faults, protect our website and systems, and prevent misuse. We rely on our legitimate interests in operating a secure and functional business.
- Marketing: to send relevant updates and offers where you have consented or where another lawful permission applies.
- Analytics and advertising: to understand website use and measure campaigns, using consent where required.
- Legal matters: to comply with legal obligations and establish, exercise or defend legal claims.
Where we rely on legitimate interests, we consider whether those interests are outweighed by your rights and interests. Where information is needed to fulfil a contract or legal obligation, not providing it may prevent us from supplying the relevant service.
4. Information Processed Through Client Automations
An automation may process personal information contained in emails, documents, forms, customer records or other connected systems.
Where we handle that information solely on a client’s instructions, we act as a service provider or data processor. The client remains responsible for deciding the purposes of processing and providing the relevant privacy information to the people concerned.
The scope of access, authorised processing, service providers, security responsibilities and arrangements for returning or deleting information should be addressed in the applicable service agreement and data processing terms.
If your information is processed through an automation operated for one of our clients, contact that organisation first to exercise your rights. We will assist it as required by our contractual and legal obligations.
4. Information Processed Through Client Automations
An automation may process personal information contained in emails, documents, forms, customer records or other connected systems.
Where we handle that information solely on a client’s instructions, we act as a service provider or data processor. The client remains responsible for deciding the purposes of processing and providing the relevant privacy information to the people concerned.
The scope of access, authorised processing, service providers, security responsibilities and arrangements for returning or deleting information should be addressed in the applicable service agreement and data processing terms.
If your information is processed through an automation operated for one of our clients, contact that organisation first to exercise your rights. We will assist it as required by our contractual and legal obligations.
5. AI and Connected Services
Some solutions may use AI or other third-party services to extract information, classify content, prepare drafts or perform agreed workflow steps. Relevant information may be transmitted to those services as part of the agreed solution.
The information processed and how it is handled depend on the providers, account settings and configuration used. Relevant provider arrangements, including retention and any use of data for model improvement, need to be assessed when selecting and configuring a solution.
This privacy policy does not provide blanket permission to use client information to train AI models. Any such use requires a separate assessment, an appropriate legal basis and any necessary authorisation.
AI outputs can contain errors. Any processing involving decisions with legal or similarly significant effects requires separate consideration and appropriate privacy information and safeguards.
6. Email and Marketing Communications
Submitting an enquiry does not automatically subscribe you to marketing emails.
Where you subscribe or we are otherwise permitted to contact you, we may send information about our products, services and relevant updates. You can unsubscribe using the link in a marketing email or by contacting us.
Where enabled and lawful, email tools may record delivery, opens and link clicks to help us understand engagement. Some tracking technologies require consent.
Unsubscribing from marketing does not prevent us from sending necessary messages about your enquiry, contract, payment or support request. We may retain a limited suppression record to honour your preference not to receive marketing.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies for essential functionality, preferences, analytics and advertising.
Where consent is required, optional technologies should remain disabled until you agree. You can change your choices through the website’s cookie controls where provided, or manage cookies through your browser.
Our Cookie Policy provides further information about the technologies used on the website. Disabling certain cookies may affect functionality.
8. Who We Share Information With
We share personal information where necessary with providers that help us operate the business and deliver agreed services. These may include:
- Website hosting, storage and security providers.
- Email, enquiry management and scheduling providers.
- Payment processors and accounting providers.
- Automation platforms, connected applications and AI providers.
- Analytics and advertising providers, where enabled and lawfully used.
- Professional advisers and authorised contractors.
Providers may process information on our instructions or act as independent controllers for particular activities, such as payment processing. Their own privacy notices may also apply.
We may disclose information where required by law, to protect legal rights, or as part of a business sale or restructuring, subject to applicable safeguards.
9. International Transfers
Our service providers may store or process information outside the country where you live, including in countries with different data protection laws.
Where a transfer is restricted by applicable law, an appropriate transfer mechanism or permitted exception is required. Depending on the circumstances, this may involve recognised adequate protection or appropriate contractual safeguards.
You can contact us for information about relevant destinations and safeguards for your personal information.
10. How Long We Keep Information
We retain personal information only for as long as needed for the purpose for which it was collected, taking account of legal obligations and legitimate operational needs.
Retention depends on:
- Whether an enquiry remains active or a business relationship continues.
- The duration of a contract and any agreed support period.
- Applicable accounting, tax and recordkeeping requirements.
- The need to investigate security incidents or resolve disputes.
- Marketing preferences and the need to maintain suppression records.
Information processed on behalf of clients is subject to the relevant contractual retention and deletion arrangements.
When information is no longer required, it should be deleted or anonymised. Residual backup copies may remain until the relevant backup cycle expires.
11. Keeping Information Secure
We use safeguards appropriate to the information and processing involved to reduce the risk of unauthorised access, loss, misuse or disclosure.
No online service or storage system can be guaranteed completely secure. If you believe information shared with us has been compromised, contact us promptly.
12. Your Rights
Depending on the law that applies, you may have rights to:
- Obtain access to your personal information.
- Correct inaccurate or incomplete information.
- Request deletion.
- Restrict or object to particular processing.
- Receive certain information in a portable format.
- Withdraw consent where processing relies on consent.
- Challenge certain automated decisions.
- Complain to a data protection authority.
These rights are subject to applicable conditions and exceptions. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Contact info@companycompass.co to make a request. We may need to verify your identity before responding and will respond within the period required by applicable law.
You can raise a concern with us at info@companycompass.co. You also have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk.
13. Children’s Information
Our website and services are intended for business users and are not directed at children under 18.
If you believe a child has provided personal information directly to us, contact us so we can assess and address it appropriately.
14. Changes to This Policy
We may update this policy as our services or information practices change. The latest version will appear on this page with an updated date.
Where required, we will provide additional notice or obtain consent before introducing materially different uses of personal information.
15. Contact Us
For privacy enquiries, requests or concerns:
Company Compass
Email: info@companycompass.co