Privacy Policy

1. Introduction

Sussex Compliance ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. Data Collection

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: includes first name, last name, username or similar identifier.
• Contact Data: includes email address and telephone numbers.
• Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform.
• Usage Data: includes information about how you use our website and services.

3. Purpose & Legal Basis

We have set out below a description of the ways we plan to use your personal data:

4. Data Sharing

We may share your personal data with the parties set out below for the purposes set out in this privacy policy:

• Service providers acting as processors who provide IT and system administration services.
• Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers.
• HM Revenue & Customs, regulators and other authorities acting as processors or joint controllers based in the United Kingdom.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law we have to keep basic information about our customers for six years after they cease being customers for tax purposes.

6. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

8. Regulatory Oversight & Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

9. Google API Services and User Data

Sussex Compliance uses Google sign-in (Google Ads, Google Search Console and Google Analytics) solely to manage and analyse the advertising campaigns and websites of its clients, on their instruction.

Data received from Google APIs is not sold, is not used for advertising, and is not transferred to third parties, except to the hosting provider that stores it on our behalf (Supabase, EU). You can revoke this access at any time from your Google Account at myaccount.google.com/permissions.

Sussex Compliance's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. Changes to Privacy Policy

We keep our privacy policy under regular review. This version was last updated in September 2026.