Privacy Policy
Last updated: February 2026
1. Data Controller
CCVS Technologies Ltd is the data controller for personal data collected through the GW2 Compliance Assistant. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect: account information (name, email) provided during registration; documents you upload for compliance analysis; usage analytics to improve the Service; and technical data (IP address, browser type) for security purposes.
3. How We Use Your Data
Your data is used to: provide and improve the compliance analysis Service; generate reports and recommendations; communicate service updates; and comply with legal obligations.
4. Data Storage & Security
All data is stored in encrypted databases hosted within the EU/UK. We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security audits.
5. Data Sharing
We do not sell your personal data. We may share data with: cloud infrastructure providers (for hosting); authentication services (Clerk); and AI service providers (for document analysis) — all under strict data processing agreements.
6. Your Rights
Under UK GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; and object to processing. Contact us to exercise these rights.
7. Data Retention
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymised usage analytics may be retained for service improvement.
8. Cookies
We use essential cookies for authentication and session management. No third-party tracking cookies are used. See our cookie banner for detailed preferences.
9. Contact & Complaints
For privacy inquiries, contact our Data Protection Officer at privacy@ccvs.tech. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).