Privacy Policy
SCF Controls Platform
Effective Date: 22 June 2026 | Last Updated: 22 June 2026
Our Commitment to Your Privacy
This is the marketing website for the open-source SCF Controls Platform. It is a static, content-only site: there are no accounts, no logins, and no payments, so we collect very little personal data. Ginga Ninja Holdings Ltd, trading as ComplianceGenie.io ("Company", "we", "us", "our") is the data controller for this website, and we process any personal data in accordance with the UK GDPR, the EU GDPR, and other applicable data protection laws.
Data Controller: Ginga Ninja Holdings Ltd, trading as ComplianceGenie.io
Email: [email protected]
1. Scope
This Privacy Policy applies to visitors to this website. It does not cover the open-source SCF Controls Platform software when you download and run it yourself — in that case you operate the software and act as the data controller for any data it processes. It also does not cover third-party websites we link to, such as GitHub, ComplianceForge, or the Secure Controls Framework.
2. Data We Collect
Server Logs
Our hosting provider records standard technical data such as IP address, browser type, and pages requested to deliver and secure the website.
Analytics (if enabled)
Aggregated, anonymised statistics about how the website is used. No accounts, profiles, or individual tracking.
Direct Contact
If you email us, we receive the contents of your message and your email address so we can reply.
We do not collect account details, upload any customer content, or process payment information through this website, because none of those features exist here.
3. How We Use Data and Our Legal Basis
We use the limited data described above to:
- Operate and secure the website — deliver pages, prevent abuse, and diagnose technical problems (server logs)
- Understand usage — measure aggregate, anonymised traffic to improve the site (analytics, if enabled)
- Respond to you — reply to enquiries you send us by email
Our legal basis for this processing is our legitimate interests in running a secure, functional website and responding to people who contact us. We do not carry out automated decision-making or profiling.
4. Data Sharing
We share data only with the providers that help us run this website — principally our hosting provider, and any analytics provider if analytics are enabled — and only as needed to deliver the site. We may also disclose data where required by law, court order, or to protect our rights or safety.
We do not sell, rent, or trade your personal data.
5. International Transfers
Our hosting and analytics providers may process data on servers outside the UK and European Economic Area. Where that happens, we rely on appropriate safeguards — such as UK/EU adequacy decisions or Standard Contractual Clauses — to protect your data.
6. Data Retention
Server logs and analytics data are kept only for as long as needed to operate and secure the website, after which they are deleted or anonymised. Email correspondence is kept for as long as needed to handle your enquiry and any related follow-up.
7. Your Rights
Under UK GDPR and EU GDPR, you have the following rights:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate or incomplete data |
| Erasure | Request deletion of your data ("right to be forgotten") |
| Restriction | Limit how we process your data |
| Objection | Object to processing based on legitimate interests |
| Complaint | Lodge a complaint with a supervisory authority |
7.1 Exercising Your Rights
To exercise your rights, contact us at [email protected]. We will respond within 30 days and may request identity verification to protect your data.
7.2 Supervisory Authority
UK: Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
EU: Your local data protection authority
8. Cookies and Tracking
For details about cookies and similar technologies used on this website, please see our Cookie Policy.
9. Children's Privacy
This website is intended for a professional audience and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review it periodically.
11. Contact Us
Data Protection Contact
Ginga Ninja Holdings Ltd, trading as ComplianceGenie.io
Office 10, Technology House, 9 Newton Place, Glasgow, Scotland, G3 7PR
Email: [email protected]
We aim to respond to all enquiries within 30 days.