Privacy Policy
Effective Date: June 2025

INTRODUCTION

Secret Compass (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Secret Compass AI Risk Assessment Tool (“the Service”). By using the Service, you agree to the terms set out in this policy.

INFORMATION WE COLLECT

We collect the following types of information when you use our platform:

a. Personal Information

  • Account Details: Name, email address, and contact information provided during registration.
  • Billing Information: Payment information including billing address and payment card details (processed securely via our payment provider).

b. Usage Data

Data about how you interact with the Service (e.g. features used, time spent, session times, navigation paths).

c. Risk Assessment Data

  • Information you input into the tool, such as location, production context, and activity details.
  • AI-generated risk assessments, including hazard lists, risk descriptions, and control measures.

HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

a. To Provide and Improve the Service

  • Operate and maintain the Service.
  • Ensure accuracy and relevance of AI-generated outputs.
  • Improve platform features, speed, and reliability.

b. To Process Transactions and Manage Accounts

  • Handle subscriptions and payments.
  • Maintain user accounts and associated risk assessments.

c. To Communicate with You

  • Send service updates, notifications, and support messages.
  • Respond to user enquiries and support requests.

d. For Research and Development

  • Analyse anonymised data to improve the accuracy and relevance of our AI models.
  • Identify opportunities for feature development and enhancement.

e. To Ensure Compliance and Security

  • Comply with legal obligations.
  • Protect the rights, property, and safety of users and Secret Compass.

LEGAL BASIS FOR PROCESSING

We rely on the following lawful bases for processing your personal data:

  • Consent: When you give us permission to use your information.
  • Contract: Where processing is necessary to fulfil a contract with you (e.g. account and service access).
  • Legitimate Interests: For development, analysis, security, and service improvement purposes.

DATA SHARING AND DISCLOSURE

We do not sell your personal data. We may share your information with:

  • Service Providers: Trusted third parties who support our service (e.g. hosting, payment processing), under strict confidentiality obligations.
  • Regulators or Law Enforcement: When required to meet legal obligations or respond to lawful requests.
  • Business Transfers: In the event of a merger, acquisition, or restructuring, your data may be transferred as part of that process.

DATA SECURITY

We implement technical and organisational measures to protect your data, including:

  • Encryption in transit and at rest
  • Anonymisation of data where appropriate
  • Access controls and internal audits

DATA RETENTION

We retain personal data only as long as necessary to deliver the Service and meet legal, regulatory, or operational requirements. You may request deletion of your data, subject to any legal retention obligations.

YOUR RIGHTS

Under UK data protection law, you have the right to:

  • Access your data and request a copy
  • Correct inaccurate or incomplete data
  • Delete your data in certain circumstances
  • Restrict or object to certain types of processing
  • Request data portability

To exercise your rights, email us at info@secretcompass.com. We will respond within the timeframes required by law.

INTERNATIONAL TRANSFERS

Your data is processed primarily in the UK. If transferred outside the UK, we ensure appropriate safeguards are in place in line with applicable laws.

CHANGES TO THIS POLICY

We may update this policy from time to time. Any changes will be posted on this page with the new effective date. Please check back regularly to stay informed.

CONTACT US

For any questions about this policy or your data rights, contact:

Secret Compass

Email: info@secretcompass.com

Address: 14 Whitehouse Street, Bristol, BS3 4AY, United Kingdom