Privacy Policy
Last updated: January 2026
Summary
- We collect only the information necessary to respond to your enquiries
- Your data is stored securely in the EU (Google Cloud, Firestore)
- We retain contact data for up to 24 months, then automatically delete it
- You can request access, correction, or deletion of your data at any time
- We do not sell your data or use tracking cookies
On this page
Introduction
Council Compass ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
Council Compass is the data controller responsible for your personal data. If you have questions about this policy or our data practices, contact us at gianluca@councilcompass.com.
Information We Collect
Information you provide:
- Contact information: name, email address, organisation, job role when you request a demo or contact us
- Communications: messages you send us through our contact form
Information collected automatically:
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website
How We Use Your Information
- To respond to your enquiries and demo requests
- To send you information about our services (with your consent)
- To improve our website and services
- To comply with legal obligations
Legal Basis for Processing
- Consent: when you submit a contact form with explicit consent
- Legitimate interests: to improve our services and respond to enquiries
- Legal obligation: when required by law
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions and lead data are retained for up to 24 months, after which they are automatically deleted.
Data Storage & Security
Your data is stored securely within the European Union using Google Cloud Platform (Firestore) with industry-standard encryption. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
Your Rights
Under UK GDPR, you have the right to:
- Access: request a copy of your personal data
- Rectification: request correction of inaccurate data
- Erasure: request deletion of your data ("right to be forgotten")
- Restriction: request limited processing of your data
- Portability: receive your data in a portable format
- Object: object to processing based on legitimate interests
- Withdraw consent: withdraw consent at any time
To exercise any of these rights, contact us at gianluca@councilcompass.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Third-Party Services
We use the following third-party services:
- Google Cloud Platform (Firestore): data storage (EU region)
- Resend: email delivery service
These providers are contractually bound to protect your data and process it only on our behalf.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated "Last updated" date.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us:
Email: gianluca@councilcompass.com