Privacy policy.

1. Introduction

Greymark Insight Group ("Company," "we," "us," or "our"), operating as CompliQuest, is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website compliquest.com and use our services, including our learning management system and compliance training courses.

Our registered address is 160 Robinson Road, Singapore Business Federation Center, Singapore. For privacy-related inquiries, contact us at hello@compliquest.com.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, job title, and password when you create an account.
• Payment Information: Billing address and payment details processed securely through our payment processor (Stripe). We do not store complete credit card numbers.
• Course Data: Progress, quiz scores, completion records, and certificates earned.
• Communications: Information you provide when contacting us, including support requests and feedback.
• Enterprise Data: For corporate clients, employee lists and organizational data provided for training administration.

2.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, and device identifiers.
• Usage Data: Pages visited, time spent, features used, and interaction patterns.
• Cookies and Tracking: We use cookies and similar technologies as described in Section 7.

3. How We Use Your Information

We use collected information for:

• Providing, maintaining, and improving our services and platform
• Processing transactions and sending related information
• Tracking course progress and issuing certificates
• Sending administrative notices, updates, and security alerts
• Responding to inquiries and providing customer support
• Analyzing usage patterns to improve user experience
• Complying with legal obligations and enforcing our terms
• With your consent, sending marketing communications (you may opt out at any time)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Contract Performance: To deliver services you have purchased
• Legitimate Interests: To improve our services, prevent fraud, and ensure security
• Legal Compliance: To meet our legal and regulatory obligations
• Consent: For marketing communications and non-essential cookies

5. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service Providers: Third parties who assist in operating our platform (hosting, payment processing, analytics, email delivery). These providers are contractually bound to protect your data.
• Enterprise Clients: If your employer provides access to our platform, they may receive reports on your training progress and completion.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with any merger, acquisition, or sale of company assets.
• With Your Consent: For any other purpose with your explicit consent.

6. Third-Party Services

We use the following third-party services:

• Thinkific: Learning management system for course delivery
• Stripe: Payment processing (PCI-DSS compliant)
• SendGrid: Email delivery services
• Vercel: Website hosting and analytics
• Sentry: Error monitoring and performance tracking

7. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for platform functionality (authentication, security)
• Analytics Cookies: To understand how visitors use our site
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Course completion records and certificates are retained indefinitely to support your professional credentials. We may retain certain information as required by law or for legitimate business purposes (fraud prevention, legal compliance). You may request deletion of your data subject to legal retention requirements.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Singapore, the United States, and the European Union. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data during international transfers.

10. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, regular security assessments, and secure development practices. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using commercially reasonable measures.

11. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority
• Opt out of marketing communications

To exercise these rights, contact us at hello@compliquest.com. We will respond within 30 days.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will provide additional notice via email. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

For questions about this Privacy Policy or our data practices, contact us at: