Privacy Policy

Privacy Policy

Last updated: August 2026

CompyCo Management Limited (“CompyCo”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data processed in connection with our website and services.

This Privacy Policy explains what personal data we may collect, how and why we use it, when it may be shared, how long it may be retained and the rights available to individuals under applicable data protection law.

1. Who we are

CompyCo Management Limited is an Irish company providing business advisory, coordination and administrative services to businesses.

For personal data that CompyCo collects and uses for its own business purposes, CompyCo is responsible for determining why and how that information is processed.

Contact: info@compyco.com

2. Personal data we may collect

The personal data we process depends on your relationship with us and the service requested.

It may include:

  • name and business contact details, including email address, telephone number and postal or residential address;

  • date of birth, nationality and residency information where relevant to a requested service;

  • identification documents, such as passports or other identification documents and proof of address, where required for a service being coordinated;

  • information concerning company directors, shareholders, beneficial owners and other persons connected with a business;

  • company and business information;

  • financial, payment and tax-related information where relevant to a requested service;

  • correspondence and information provided when communicating with us by email, telephone, website forms, online chat or other communication channels;

  • information and documents necessary to coordinate services with independent professional or service providers;

  • information relating to enquiries, quotations, engagements and services provided by CompyCo;

  • business and professional contact information used for business development and B2B marketing; and

  • technical and website usage information collected through cookies and similar technologies, subject to your cookie preferences.

We aim to collect only information that is relevant and necessary for the particular purpose or service.

3. How we obtain personal data

We may obtain personal data:

  • directly from you;

  • from a company, employer, representative or other person acting on your behalf;

  • through our website, online forms, email, telephone or online chat;

  • through correspondence and documentation supplied in connection with a requested service;

  • from independent professional or service providers involved in delivering a service;

  • from publicly available business sources, company registers, corporate websites and professional sources; and

  • from legitimate business information and business contact-data providers used for B2B business development.

Where personal data has not been obtained directly from you, we provide information about our processing where required by applicable data protection law.

4. Why we process personal data

We may process personal data in order to:

  • respond to business enquiries and requests for information;

  • assess business requirements and prepare proposals or quotations;

  • provide business advisory, coordination and administrative services;

  • communicate with clients and prospective business clients;

  • coordinate requested services with independent professional and service providers;

  • collect, organise and transmit information and documentation required by a relevant service provider;

  • manage our client relationships and business records;

  • issue and administer invoices and payments;

  • comply with applicable legal, accounting, tax and regulatory obligations;

  • establish, exercise or defend legal claims;

  • protect our website, systems and business against misuse, fraud and security threats;

  • operate and improve our website and services;

  • conduct appropriate business-to-business development and marketing activities; and

  • send newsletters and other communications where permitted by applicable law.

5. Legal bases for processing

Depending on the circumstances, we may rely on one or more of the following legal bases.

Contract and steps before entering into a contract

We may process personal data where necessary to respond to a request, prepare an offer, enter into an engagement or provide an agreed service.

Legal obligations

We may process personal data where necessary for CompyCo to comply with applicable legal, tax, accounting or other statutory obligations.

Legitimate interests

We may process personal data where necessary for legitimate business purposes, including managing client and business relationships, responding to business enquiries, maintaining appropriate business records, protecting our systems, improving our services and conducting appropriate B2B business development.

Where we rely on legitimate interests, we consider whether those interests are overridden by the rights and interests of the individual concerned.

Consent

We rely on consent where applicable law requires it, including for certain communications and non-essential website cookies.

Where processing is based on consent, consent may be withdrawn at any time.

6. Information collected for professional and third-party services

CompyCo coordinates services that may ultimately be performed by independent professional, specialist or other service providers.

Depending on the service requested, we may receive identification documents, proof of address, corporate information, ownership information, financial or tax information and other documentation required by the relevant provider.

CompyCo may collect, organise and transmit such information for the purpose of coordinating the service requested by the client.

Where a service requires a regulated, licensed or otherwise professionally authorised provider, the relevant regulated or professional service is performed by that independent provider and not by CompyCo.

Such providers may have their own legal, regulatory, professional or anti-money-laundering obligations and may independently determine what information or documentation they require.

7. Outsourced administrative services

Where CompyCo provides outsourced administrative services to a business client, we may process personal data relating to that client’s employees, customers, suppliers, contractors or other persons as part of carrying out the administrative work requested by the client.

Where CompyCo processes such information solely on the documented instructions of the client, the client will generally determine the purposes and means of the processing and CompyCo will process the information on the client’s behalf.

Appropriate data-processing terms may apply to such arrangements where required by data protection law.

This Privacy Policy primarily describes processing for which CompyCo determines the purposes and means.

Individuals whose personal data is processed by CompyCo solely on behalf of a business client should generally direct requests concerning that processing to the relevant business client.

8. Website forms and communications

When you submit information through a website form, online chat, email or another communication channel, we use that information to respond to your enquiry and, where requested, assess or provide our services.

We use third-party technology providers for functions such as website forms, communications, customer relationship management, data storage and business administration. Information submitted through these systems may therefore be stored and processed by those providers on our behalf.

We take appropriate steps to use service providers that provide suitable data protection and security safeguards.

9. B2B marketing and business communications

CompyCo conducts outbound marketing on a business-to-business basis. We do not use prospecting data for the purpose of marketing CompyCo services to private individuals in their personal capacity.

We may use business and professional contact information to communicate with companies and persons acting in a business or professional capacity about CompyCo services that we reasonably consider may be relevant to their organisation.

Business contact information may be obtained:

  • directly through previous communications or business relationships;

  • from publicly available company and professional sources;

  • from company websites and company registers; and

  • from legitimate business information and business contact-data providers.

Where business contact information identifies a particular person, such as a named corporate email address, we treat that information as personal data where applicable.

B2B marketing communications are carried out in accordance with applicable data protection and electronic communications requirements.

Recipients may object to direct marketing at any time. Where a recipient opts out or objects, we will stop using their personal data for direct marketing purposes.

We may retain limited information, such as an email address, on a suppression list where necessary to ensure that the person’s opt-out request continues to be respected.

Newsletter subscriptions

Individuals may separately choose to subscribe to CompyCo newsletters or other marketing communications.

Where consent is required for such communications, we rely on the consent provided by the subscriber.

Subscribers may unsubscribe at any time by using the unsubscribe facility provided in the communication or by contacting info@compyco.com.

10. Sharing personal data

We do not sell personal data.

We may disclose personal data where reasonably necessary to:

  • independent professional, specialist or service providers involved in a service requested by the client;

  • accountants, tax professionals, lawyers, company service providers or other specialist providers where relevant to a requested service;

  • technology, hosting, communications, online-form, CRM, data-storage and business administration providers acting on our behalf;

  • professional advisers and insurers;

  • public authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law; and

  • other parties where the client or relevant individual has specifically requested or authorised the disclosure.

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

Independent professional and service providers may process personal data under their own privacy obligations where they independently determine the purposes and means of their processing.

11. International transfers

CompyCo provides international business services and uses technology providers and professional or service-provider networks that may be located inside or outside the European Economic Area (“EEA”).

As a result, personal data may in some circumstances be transferred to, or accessed from, countries outside the EEA.

Where GDPR requirements apply to such transfers, we take appropriate steps to ensure that a lawful transfer mechanism and appropriate safeguards are in place.

Depending on the circumstances, these may include an adequacy decision adopted by the European Commission, approved contractual safeguards such as Standard Contractual Clauses, or another transfer mechanism permitted under applicable data protection law.

Where information must be provided to an independent service provider outside the EEA in order to perform a service specifically requested by a client, the nature and destination of the requested service will also be relevant to the transfer.

12. How we protect personal data

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

These measures may include access controls, authentication measures, secure business systems, security software, encryption where appropriate, restricted access to information and procedures designed to protect confidential information.

Access to personal data is limited to persons and service providers who require access for legitimate business purposes.

No method of electronic storage or transmission is completely secure and absolute security cannot be guaranteed.

13. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, contractual and regulatory requirements.

Retention periods vary according to the type of information and the reason for processing.

For example:

  • enquiry and prospective business-client information is retained for an appropriate period to manage the enquiry and any subsequent business relationship;

  • client and service records may be retained for the duration of the engagement and for an appropriate period afterwards for contractual, legal, accounting and dispute-resolution purposes;

  • invoices and accounting records are retained for the period required under applicable Irish law;

  • identification and supporting documents collected for a particular coordinated service are retained only for as long as reasonably necessary for that service and any applicable legal or contractual requirements;

  • B2B marketing information is retained while there is a lawful basis and legitimate business purpose for its use, or until the recipient objects or opts out, subject to retaining limited suppression information necessary to respect that request;

  • newsletter information is retained until the subscriber unsubscribes or the information is otherwise no longer required, subject to appropriate suppression records; and

  • personal data processed on behalf of an outsourcing client is retained in accordance with the client’s instructions and the applicable data-processing arrangement.

When personal data is no longer required, we delete, anonymise or securely dispose of it as appropriate.

14. Cookies and website analytics

Our website uses cookies and similar technologies, including analytics technologies, subject to applicable consent requirements.

Non-essential cookies are not activated unless the appropriate consent has been provided.

For detailed information about the cookies used on our website and how to manage your preferences, please see our Cookie Policy.

15. Your data protection rights

Subject to the circumstances and applicable law, you may have the right to:

  • obtain information about how your personal data is processed;

  • request access to personal data we hold about you;

  • request correction of inaccurate or incomplete personal data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to certain processing based on legitimate interests;

  • object at any time to processing of your personal data for direct marketing;

  • request data portability where applicable; and

  • withdraw consent at any time where processing is based on consent.

These rights are not absolute and may be subject to conditions or exemptions under applicable law.

To exercise a data protection right, contact info@compyco.com.

We may need to verify your identity before responding to a request.

16. Complaints

If you have concerns about how CompyCo processes your personal data, please contact us so that we can address your concerns.

You also have the right to lodge a complaint with the Irish Data Protection Commission or another competent supervisory authority.

17. Automated decision-making

CompyCo does not currently use personal data to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices, technology or applicable legal requirements.

The date at the top of this Privacy Policy indicates when it was most recently updated.

19. Contact us

For questions about this Privacy Policy or the processing of personal data by CompyCo, please contact:

CompyCo Management Limited
Email: info@compyco.com