Effective Date: March 1, 2026
1. Introduction
Compliance Ghost ("we," "us," or "our") is committed to protecting the privacy of our customers and website visitors. This Privacy Policy describes how we collect, use, store, and share your personal information when you visit our website at complianceghost.com or use our products and services.
By using our website or purchasing our products, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Information You Provide
We collect information that you voluntarily provide to us, including:
- Contact information: Name, email address, phone number, and business name when you fill out forms, request a gap assessment, or make a purchase
- Business information: Industry type, business size, and compliance needs provided during the ordering process
- Payment information: Payment details are processed securely through Stripe and are not stored on our servers
- Communications: Any messages, questions, or feedback you send to us via email or contact forms
Information Collected Automatically
When you visit our website, we may automatically collect certain information, including:
- Usage data: Pages visited, time spent on pages, click patterns, and navigation paths
- Device information: Browser type, operating system, screen resolution, and device type
- Location data: General geographic location based on IP address (city/state level only)
- Referral data: How you arrived at our website (search engine, ad click, direct link, etc.)
3. How We Use Your Information
We use the information we collect for the following purposes:
- Order fulfillment: To create and deliver your compliance documentation
- Customer support: To respond to your questions and provide assistance
- Service improvement: To understand how our products are used and improve our offerings
- Marketing communications: To send you relevant information about our products and services (with your consent, and you can opt out at any time)
- Compliance Shield updates: To deliver regulation alerts and manual updates to active subscribers
- Analytics: To analyze website traffic and user behavior to optimize our website and marketing
4. Cookies & Tracking Technologies
Our website uses the following tracking technologies:
- Google Analytics / Google Ads (gtag.js): We use Google's advertising and analytics services to measure website performance, track ad conversions, and understand user behavior. Google may use cookies to serve ads based on your prior visits to our website.
- Essential cookies: We use minimal cookies necessary for website functionality, such as maintaining your session during checkout.
You can manage cookie preferences through your browser settings. Disabling cookies may affect your experience on our website.
For more information on how Google uses data, visit Google's Privacy Policy.
5. Third-Party Services
We share your information with the following third-party services, solely for the purposes described:
- Stripe: Payment processing. Stripe handles all payment information securely under their own privacy policy. We do not store your credit card details.
- Formspree: Form submission processing for our gap assessment lead capture. Formspree receives the information you submit through our forms.
- Google: Analytics and advertising services. Google receives anonymized usage data through our analytics tags.
- GitHub Pages: Website hosting. GitHub may collect server logs as part of hosting our website.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
6. Data Security
We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Using HTTPS encryption for all website communications
- Processing payments through PCI-compliant payment processor (Stripe)
- Limiting access to personal information to authorized personnel only
- Regularly reviewing and updating our security practices
However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:
- Customer records: Retained for the duration of our business relationship plus 3 years, or as required by applicable law
- Marketing contacts: Retained until you opt out of communications
- Website analytics data: Retained in anonymized form as configured in our analytics tools
You may request deletion of your personal information at any time by contacting us at [email protected].
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Opt-out: Unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in any email or by contacting us
- Portability: Request your data in a commonly used, machine-readable format
To exercise any of these rights, please contact us at [email protected]. We will respond to requests within 30 days.
9. Children's Privacy
Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: