Privacy Policy
Last updated as October 1, 2026
Compliance Insight Inc. (“Compliance Insight,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and retain personal information through www.compliance-insight.com, our website forms, and related business and marketing communications.
Compliance Insight Inc. is responsible for the personal information covered by this policy. Questions and privacy requests may be directed to info@compliance-insight.com.
Information We Collect
We collect information you provide when you contact us, complete a website form, request information about our services, download resources, or subscribe to communications. Depending on your interaction with us, this may include:
- Your name, business email address, telephone number, company, and job title.
- Information about your inquiry, service needs, or business relationship with us.
- Communication preferences and correspondence you send us.
Our website and service providers may also collect technical and usage information, such as IP address, browser and device information, pages visited, referring websites, visit times, and interactions with website content or emails. Collection depends on the tools in use and, where applicable, your consent choices.
Please do not submit patient information, medical records, or other sensitive personal information through general website forms.
How We Use Information
We use personal information to:
- Respond to inquiries and requests.
- Provide and manage our services and business relationships.
- Send requested resources and relevant business communications.
- Manage subscriptions and marketing preferences.
- Understand website use and improve our content and services.
- Maintain website security and prevent misuse.
- Meet legal obligations and establish, exercise, or defend legal claims.
Legal Bases for Processing
Where the General Data Protection Regulation (“GDPR”) or UK GDPR applies, we rely on the legal basis appropriate to the activity:
- Consent: For activities requiring your permission, including nonessential cookies and marketing communications where consent is required.
- Contract: When processing is necessary to perform a contract with you or take steps at your request before entering into one.
- Legitimate interests: For necessary and proportionate activities such as responding to business inquiries, managing business relationships, and protecting our website, where those interests are not overridden by your rights.
- Legal obligations: When processing is necessary to comply with applicable law.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Providing information through our general inquiry forms is voluntary. If you do not provide information needed to respond or deliver a requested service, we may be unable to fulfill your request.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to support website functions and, depending on your choices, analyze website activity or support marketing.
Essential technologies support functions necessary to operate the website. Nonessential analytics and marketing technologies require your consent where required by applicable law.
You can accept or reject nonessential cookies and manage available preferences through the website’s cookie controls. You may also use those controls to change your choices or withdraw consent.
Browser settings provide additional cookie controls. Blocking certain cookies may affect website functionality. Rejecting nonessential cookies does not prevent you from contacting us.
Google Analytics and Two-Month Data Retention
We use Google Analytics to understand how visitors interact with our website and improve its content and performance.
Our Google Analytics user-level and event-level data retention periods are set to two months. The setting that resets user data retention when new activity occurs is turned off. New activity therefore does not restart the user data retention period.
Data reaching the end of the applicable retention period is automatically deleted during Google Analytics’ monthly deletion process. These settings do not affect most standard reports based on aggregated data.
The two-month period applies specifically to data governed by these Google Analytics retention settings. It does not determine the lifespan of individual cookies or the retention of contact forms, HubSpot records, emails, or client records.
For more information, see Google’s Privacy Policy.
HubSpot and Business Communications
We use HubSpot to manage website form submissions, business contacts, and marketing email communications. Information you submit through forms may be stored in HubSpot and used to respond to your request, manage our relationship with you, and send communications consistent with your preferences and applicable law.
Depending on the features enabled and your consent choices, HubSpot technologies may also collect information about website visits or interactions with marketing emails.
Contact records in HubSpot remain until Compliance Insight manually deletes them. They are not subject to the two-month Google Analytics retention setting.
You can unsubscribe from marketing emails using the unsubscribe link in those messages or by contacting info@compliance-insight.com. Unsubscribing stops marketing emails but does not automatically delete your HubSpot contact record. We may retain limited information needed to honor your unsubscribe request.
Unsubscribing does not prevent us from sending necessary communications about an active service, transaction, or legal matter.
For information about HubSpot’s practices, see HubSpot’s Privacy Policy.
How We Share Information
We do not sell or rent our customer contact lists.
We may share personal information with service providers supporting our operations, including website hosting, analytics, customer relationship management, email delivery, and IT support. These include Google Analytics and HubSpot.
Where providers process personal information on our behalf, they are subject to applicable contractual restrictions and data protection obligations.
We may also disclose information when required by law, to respond to lawful requests, to protect rights and safety, or in connection with a merger, acquisition, or transfer of business assets, subject to applicable safeguards.
International Data Processing
Compliance Insight is based in the United States. Personal information may be processed in the United States and other countries where our service providers operate. Those countries may have different data protection laws from your country.
Where applicable law requires safeguards for international transfers, we use an appropriate lawful transfer mechanism, such as an applicable adequacy decision or approved standard contractual clauses.
Contact info@compliance-insight.com for information about safeguards applicable to your personal information and how to obtain a copy or description of them.
How Long We Retain Information
Retention depends on the type of information, the purpose for collecting it, our relationship with you, and applicable legal requirements.
- Google Analytics data: User-level and event-level data governed by our retention settings is subject to the two-month period described above.
- HubSpot contacts and form submissions: Records remain in HubSpot until we manually delete them. Decisions about continued retention take into account unresolved inquiries, ongoing services or business relationships, relevant follow-up, marketing preferences, and applicable legal obligations.
- Marketing records: Unsubscribing stops marketing emails but does not automatically delete the underlying contact record. Limited information may be retained to prevent further unwanted marketing.
- Client and contractual records: Retention depends on service delivery, contractual obligations, applicable recordkeeping requirements, and relevant legal claim periods.
- Security logs and backups: Retention depends on operational security, incident investigation, recovery needs, and backup replacement cycles.
The absence of an automatic deletion setting does not mean that information is needed indefinitely. Where applicable law requires deletion, we must delete or anonymize information that is no longer necessary, unless a lawful reason requires continued retention.
Your Privacy Rights
Depending on your location and applicable law, you may have rights to:
- Request access to your personal information.
- Correct inaccurate or incomplete information.
- Request deletion of information.
- Request restriction of processing.
- Receive certain information in a portable format.
- Object to processing based on legitimate interests.
- Object to the use of your information for direct marketing.
- Withdraw consent where processing relies on consent.
To exercise a right, email info@compliance-insight.com. You may request deletion of your HubSpot contact information through this address, subject to applicable legal exceptions and necessary retention obligations.
We may need to verify your identity before responding. Rights are subject to applicable conditions and exceptions. We will respond within the timeframe required by law, generally within one month for GDPR requests, subject to permitted extensions.
If GDPR or UK GDPR applies, you may also lodge a complaint with a relevant data protection supervisory authority, particularly where you live, work, or believe an infringement occurred.
Security
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and loss. No internet transmission or storage system can be guaranteed completely secure.
Children’s Privacy
Our website and services are intended for business professionals and are not directed to children. We do not knowingly collect personal information from children under 13.
If you believe a child has provided personal information, please contact us so we can investigate and take appropriate action.
Links to Other Websites
Our website may contain links to third-party websites. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. The date above identifies the latest revision. Where required, we will provide additional notice of material changes or obtain new consent.
Contact Us
For questions about this policy or requests concerning your personal information, contact:
Compliance Insight Inc.
497 Circle Freeway, Suite 230
Cincinnati, Ohio 45246
Email: info@compliance-insight.com
Telephone: (513) 860-3512