This Privacy Policy explains how Compliance Factory ("we", "us", "our") collects, uses, discloses and protects personal data when you visit compliancefactory.io (the "Site") or engage us for compliance advisory services.

1. Who we are

Compliance Factory is a compliance-as-a-service firm supporting VASPs, CASPs and Web3 companies. For any privacy-related query, contact us at tb@compliancefactory.io.

2. Information we collect

  • Contact details you provide through our forms, email or Telegram (name, email address, company, message content)
  • Information you share in the course of a compliance engagement, which may include company documentation and regulatory filings
  • Basic technical data collected automatically when you browse the Site (IP address, browser type, pages visited), used for security and analytics purposes

3. How we use your information

  • To respond to enquiries and provide requested services
  • To deliver, manage and improve our compliance advisory engagements
  • To comply with our own legal and regulatory obligations
  • To maintain the security and proper functioning of the Site

4. Legal basis for processing

Where the UK GDPR, EU GDPR or equivalent data protection law applies, we process personal data on the basis of legitimate interest (responding to enquiries, operating our business), contractual necessity (delivering engaged services) and, where applicable, your consent.

5. Sharing of information

We do not sell personal data. We may share information with trusted service providers who support our operations (for example, email or scheduling tools), and where required by law or regulatory obligation.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including any legal, accounting or reporting requirements.

7. Your rights

Depending on your location, you may have rights to access, correct, delete or restrict the use of your personal data, and to object to certain processing. To exercise any of these rights, contact tb@compliancefactory.io.

8. International transfers

As we work with clients across multiple jurisdictions, personal data may be processed in countries outside your own. Where required, we take appropriate steps to ensure such transfers are subject to adequate safeguards.

9. Cookies

The Site may use essential cookies required for basic functionality. We do not currently use third-party advertising cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact

For any questions about this Privacy Policy or how your data is handled, contact us at tb@compliancefactory.io or via Telegram at t.me/ThierryCompliance.