EU AI Act · Transparency duties in force
CompliAct

Privacy

Privacy policy.

We collect the minimum needed to do the work. We never sell data.

01

Who we are

CompliAct is a compliance operations practice based in Toronto, Canada. Contact: team@compliact.com.
02

What we collect

Contact details you provide (name, work email, company); intake questionnaire responses; Exposure Check answers (stored without identifying you unless you contact us); payment information, processed by our payment provider — we never see or store card numbers.
03

How we use it

To deliver engagements, respond to inquiries, and improve our assessments. We do not use your data for advertising and we do not sell it.
04

Engagement materials stay confidential

Everything you share during an engagement — systems, vendors, data flows — is treated as confidential, used only for your dossier, and never disclosed to third parties without your written consent.
05

Retention

Intake and dossier materials are retained for the duration of your engagement plus 24 months for reference, and deleted sooner on request at any time.
06

Your rights

Request access, correction, or deletion of your personal information at team@compliact.com. We'll respond within 30 days.
07

Changes

We'll post material changes here with a revised date.