Legal

Privacy Policy

This Privacy Policy explains, in general terms, how Compass Wertvale collects, uses, stores, and protects information in connection with our website and services. It is a general template intended for informational purposes and should be reviewed and adapted to your specific operations and applicable law before use.

Editable Draft GDPR-Oriented Structure Last Updated: [Insert Date]

1. Who We Are

Compass Wertvale ("we", "us", "our") provides an AI-based data analysis and decision-support platform for prospective investors. This policy describes how we handle personal data collected through our website, forms, and related communications. Specific controller details, registration information, and contact points should be inserted where indicated throughout this document.

2. Scope of This Policy

This Privacy Policy applies to personal data processed when you visit our website, submit an inquiry, register interest in our services, or otherwise interact with us. It does not apply to third-party websites or services that may be linked from our site, which maintain their own privacy practices.

Data We Collect

Categories of Information

We aim to collect only the information reasonably necessary to operate our website and respond to your inquiries. The categories below are illustrative and should be adjusted to reflect actual data flows.

Category Examples Typical Source
Identity & Contact Data Name, email address, phone number Contact or onboarding forms
Technical Data IP address, browser type, device identifiers Automated collection via website
Usage Data Pages visited, time on page, referral source Analytics tools / cookies
Correspondence Data Content of emails, messages, or support requests Direct communication with us
Preference Data Marketing preferences, language settings User-provided settings
Legal Basis & Purpose

Why We Process Data

01

Contractual Necessity

Where processing is required to provide requested services, respond to inquiries, or fulfil an agreement with you.

02

Legitimate Interest

Where processing supports website security, service improvement, or fraud prevention, balanced against your rights.

03

Consent

Where you have given explicit consent, such as for optional marketing communications or non-essential cookies.

How Data Is Used

Processing Activities

01

Service Delivery

To operate the website, process inquiries, and provide the information or functionality you request.

02

Communication

To respond to messages, send administrative notices, and provide updates related to your inquiry or account, where applicable.

03

Security & Fraud Prevention

To detect, investigate, and prevent unauthorized access, misuse, or fraudulent activity affecting our systems.

04

Analytics & Improvement

To understand how our website is used in aggregate, in order to improve content, structure, and performance.

Data Sharing

Who May Receive Your Data

We do not sell personal data. Limited sharing may occur in the following circumstances, subject to appropriate safeguards.

Service Providers

Third parties that support hosting, analytics, communications, or infrastructure, acting under contractual data protection obligations.

Legal & Regulatory Bodies

Where disclosure is required to comply with a legal obligation, court order, or valid regulatory request.

Corporate Transactions

In connection with a merger, acquisition, or transfer of assets, subject to continued confidentiality obligations.

With Your Consent

Any other sharing not described above will only occur with your prior notice or consent, where required.

Retention & Security

How Long We Keep Data

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. Retention periods vary by data category and should be defined internally and referenced here.

Encrypted Transmission Access Controls Periodic Review

While we apply reasonable technical and organizational measures to protect personal data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Minimization

We aim to collect the minimum data necessary for each stated purpose and to avoid retaining information beyond its useful lifecycle.

Your Rights

Data Subject Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data, which may include the following. Exact rights and procedures depend on applicable law and should be confirmed accordingly.

Access

Request confirmation of whether we process your data and obtain a copy of it.

Rectification

Request correction of inaccurate or incomplete personal data.

Erasure

Request deletion of personal data, subject to legal or contractual limitations.

Objection

Object to certain processing activities, including processing based on legitimate interest.

Restriction

Request that processing be limited under certain circumstances.

Portability

Request a structured, commonly used copy of your data, where technically feasible.

Withdraw Consent

Withdraw previously given consent at any time, without affecting prior lawful processing.

Lodge a Complaint

File a complaint with a competent data protection supervisory authority.

Cookies

Cookies & Similar Technologies

Our website may use cookies and similar technologies to support core functionality, remember preferences, and gather aggregate usage statistics. You can typically control cookies through your browser settings; disabling certain cookies may affect site functionality.

Type Purpose Typical Duration
Essential Required for core website functionality and security Session or short-term
Analytics Aggregate insight into how the site is used Up to 12 months
Preference Remembering settings such as language Up to 12 months

International Data Transfers

Where data is processed or stored outside the region in which it was originally collected, we intend to apply appropriate safeguards, such as standard contractual clauses, consistent with applicable data protection requirements.

Children's Privacy

Our services are not directed at children, and we do not knowingly collect personal data from children. If you believe a child's data has been provided to us, please contact us so it can be reviewed and removed as appropriate.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective policies.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised effective date.

Contact

Questions About This Policy

If you have questions about this Privacy Policy or wish to exercise any of your data protection rights, please use the contact details provided on our website or via the Contact section referenced in our footer. This section should be updated with a dedicated privacy contact if one is designated.

Draft Template — Requires Legal Review Insert Jurisdiction-Specific Terms