Privacy Policy

Introduction

At ComplyX, we prioritize your privacy and are committed to safeguarding your personal data. This Privacy Policy outlines how ComplyX collects, uses, protects, and discloses information when you visit our website (https://www.complyxglobal.com) and interact with our cybersecurity and compliance intelligence services.

Effective Date: January 15, 2026
Last Updated: October 27, 2026

Company & Data Controller

The data controller responsible for the processing of your personal data is:

Purpose & Legal Basis for Processing

Under applicable data protection frameworks, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), we process personal data based on the following lawful grounds:

• Legitimate Interests: To operate, secure, troubleshoot, and optimize our website and products, protect against fraud and security incidents, and analyze aggregated visitor interactions.
• Contractual Necessity: To fulfill requested product demonstrations, deliver technical whitepapers, and perform contractual obligations with prospective or existing enterprise clients.
• Consent: Where you have explicitly provided consent, such as opting into communication updates or accepting non-essential cookies.
• Legal Obligation: To comply with applicable statutory, regulatory, and corporate accounting requirements.

Information We Collect

We collect information necessary to provide and enhance our services, organized into:

Personal Information Provided Directly by You

Information submitted voluntarily when requesting a demo, contacting sales, or accessing technical resources:

• Full Name: Provided during form submissions to personalize communication.
• Work Email Address: Used for service inquiries, demo scheduling, and technical documentation delivery.
• Company Name & Role: To understand your organization’s compliance and security evaluation requirements.
• Product Interest: Specific ComplyX modules (GRACE, Wizard, Mirror, SmarterD) you wish to evaluate.

Technical & Usage Data

Collected automatically when you navigate our website:

• IP Addresses: Used for diagnostic logging, rate limiting, and regional geographic routing.
• Browser & Device Information: Browser type, operating system, screen dimensions, and language settings to ensure proper rendering.
• Pages Visited: Referrer URLs, pages viewed, time spent per page, and navigation paths.

Cookies & Tracking Technologies

We use cookies and similar browser storage mechanisms to provide essential functionality, improve user experience, and analyze site performance. The categories of cookies we utilize include:

• Strictly Necessary Cookies: Required for the fundamental operation of the website, such as security tokens, load balancing, and remembering your theme preference (dark/light mode). These cookies do not require prior consent.
• Analytics Cookies: We utilize Google Analytics 4 to collect aggregated, non-personally identifiable metrics regarding how visitors interact with our pages, helping us identify and fix errors.
• Preference Cookies: Used to remember choices you make across sessions, such as dismissible banners or cookie consent preferences.

Managing Cookies: You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies may affect the website’s functionality.

How We Use Your Information

We use the information we collect for specific, legitimate business purposes:

• Fulfilling Inquiries: Scheduling product walkthroughs, responding to technical questions, and provisioning documentation.
• Security & Fraud Prevention: Implementing rate-limiting, verifying human requests, and defending our infrastructure against unauthorized access or attacks.
• Service Optimization: Analyzing site navigation patterns to enhance performance, accessibility, and content structure.

International Data Transfers

ComplyX operates globally. Information we collect may be transferred to, stored, and processed in the United States and other jurisdictions where our cloud infrastructure and service providers operate. When transferring personal data internationally from the European Economic Area (EEA), the United Kingdom, or Switzerland, we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission or other recognized legal transfer mechanisms.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law:

• Demo & Contact Inquiries: Retained for the duration of the business engagement, or up to three (3) years following your last interaction, after which it is securely deleted or anonymized.
• Technical Web Logs: Retained for a maximum of ninety (90) days for security auditing and diagnostic purposes before automated deletion.

Data Security

We apply rigorous enterprise-grade security controls to protect your information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: Enforcing TLS 1.3 encryption in transit with strict HSTS, and robust encryption at rest.
• Access Restrictions: Applying least-privilege, role-based access control (RBAC) and mandatory multi-factor authentication (MFA) for administrative systems.
• Continuous Audits: Conducting continuous automated penetration testing, vulnerability validation, and independent security assessments.

Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal information:

• Right to Access: You can request disclosure of the personal data we hold about you and how it is processed.
• Right to Correction (Rectification): You have the right to request correction, amendment, or updating of any inaccurate, incomplete, or outdated personal information we maintain about you.
• Right to Deletion (Erasure): You can request that we delete your personal information, subject to statutory retention requirements.
• Right to Restriction & Objection: You can object to or request restriction of our processing of your personal information under certain circumstances.
• Right to Opt-Out: You may opt out of promotional communications at any time by following the unsubscribe instructions or contacting us.

Exercising Your Rights

To exercise any of your data protection rights, please contact our privacy office at:

privacy@complyxglobal.com or legal@complyxglobal.com

We verify all requests through email confirmation to protect your personal data from unauthorized access. We will respond within thirty (30) days or within the timeframe mandated by applicable law.

Analytics Tools

We use analytics tools to monitor, optimize, and improve our website performance:

Google Analytics

• Visitor Metrics: Monitoring traffic patterns to understand how visitors interact with our pages.
• Site Performance: Analyzing site performance and response speeds to identify and resolve technical issues.
• User Behavior: Reviewing user behavior flows to improve website navigation and content accessibility.

Legal Sign-Off & Policy Updates

We may periodically update this policy to reflect changes in legal requirements or operational practices. Updates will be published on this page with an updated revision date.