Last updated September 2026
Complys is used by businesses to manage compliance information about their sites, workers and contractors. We take the security and privacy of that information seriously. This page brings together how we protect it and where to find our policies. Complys is operated by Complys Technology Ltd, registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC175190. For any question about data protection, email support@complys.co.uk.
Complys is a trading name of Complys Technology Ltd, registered in England and Wales (company no. 17084632). Registered office: Vantage Point House, Decoy Industrial Estate, Silverhills Rd, Newton Abbot TQ12 5ND.
What we collect, why, our lawful bases and your rights.
The providers that process data to run Complys.
The cookies we use and how consent works.
The terms that govern use of Complys.
For our own account, billing, marketing and website data, Complys is the data controller. Where a customer uses Complys to store or manage information about its workers, contractors or other people, that customer decides why and how the information is used, so the customer is the controller and Complys acts as its data processor, processing the information on the customer's instructions and under our agreement with them.
We use technical and organisational measures designed to protect personal information, including:
No internet service can guarantee absolute security, but we keep these measures under review. We do not claim to be "100% secure" or "certified" where that is not the case.
Complys runs on managed cloud infrastructure and uses a small number of trusted providers to operate the service (see our sub-processor list). Some of these providers are located in, or process data from, countries outside the UK — including the United States. Where UK data protection law applies and personal information is transferred internationally, we rely on an appropriate transfer mechanism and safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the standard contractual clauses, together with a transfer-risk assessment where required.
If you need to know where a particular category of your data is processed, or want details of the safeguards in place, email support@complys.co.uk.
Business customers who need a Data Processing Agreement (DPA) for their use of Complys can request one by emailing support@complys.co.uk. Our DPA covers processing on documented instructions, confidentiality, security, use of sub-processors, assistance with individual rights and breaches, and deletion or return of data at the end of the contract.
If you believe you have found a security vulnerability, or you are aware of a data protection concern, please contact support@complys.co.uk so we can investigate. If we experience a personal-data breach that is likely to result in a risk to people's rights, we will notify the ICO and, where required, affected customers and individuals in line with our obligations.