Privacy Policy
Last updated: November 2025
This Privacy Policy explains how Compassio Ltd ("we," "our," or "us") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
1. Who We Are (Data Controller)
Compassio Ltd
Trakia 44, Bulgaria
Company Number: 208421277
Email: hello@vccompass.co
Compassio Ltd is the data controller responsible for processing your personal data collected through vccompass.co (the "Website").
2. What Personal Data We Collect
We collect personal data in the following ways:
a) Data you provide voluntarily:
Email address when subscribing via Kit.com (formerly ConvertKit) forms.
Name, company name, role, fundraising stage, and other details when completing Google Forms embedded on the Website.
Information shared when booking consultations via Calendly (name, email, and any message you include).
Information provided during paid consultations or purchases of digital products (processed securely via Stripe).
b) Data collected automatically:
IP address, browser type, operating system, referral source, pages visited, and time spent on the Website (via Google Analytics).
Cookie preferences and consent data (via CookieYes).
Usage data related to embedded services such as YouTube videos or email forms.
We do not collect sensitive categories of personal data.
3. Legal Basis for Processing
We rely on the following legal bases for processing your personal data:
Consent – when you subscribe to newsletters, accept cookies, or play embedded content.
Contract – when you book a consultation or purchase a product through Calendly or Stripe.
Legitimate Interest – to maintain and improve our Website and ensure security.
You may withdraw your consent at any time.
4. How We Use Your Data
We use your personal data to:
Provide access to and operate the Website.
Send newsletters or educational content you have subscribed to.
Respond to inquiries and provide consulting services.
Process bookings and payments for consultations and digital products.
Analyze Website usage and improve performance.
Ensure compliance with legal obligations.
We do not sell or rent your data for marketing purposes.
5. Third-Party Processors
Your data may be shared with the following GDPR-compliant service providers:
Kit.com (ConvertKit): Provides email marketing and form collection services. Based in the USA.
Google Analytics: Provides anonymized analytics data. Based in the USA, with IP anonymization enabled.
CookieYes: Manages cookie consent and compliance. Based in the EU.
Google (Forms and YouTube): Processes responses submitted through embedded forms and collects data from embedded video content. Based in the USA.
Calendly: Used for scheduling meetings and collecting basic contact details. Based in the USA.
Stripe: Processes payments for consultations and digital products. Based in the USA and Ireland.
All transfers outside the EEA are protected under Standard Contractual Clauses (SCCs) or equivalent safeguards.
6. Cookies & Tracking
This Website uses:
Essential cookies for security and site operation.
Analytics cookies via Google Analytics (enabled only after consent).
Functional cookies for YouTube, ConvertKit, Calendly, and Stripe integrations.
For details, please see our Cookie Policy.
You can manage preferences through the CookieYes banner or your browser settings.
7. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. For example:
Email subscription data is retained until you unsubscribe.
Booking and payment data is retained as required by accounting regulations.
Google Form responses are retained for internal reference and deleted when no longer necessary.
8. Your Rights Under GDPR
You have the right to:
Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion ("right to be forgotten").
Restrict or object to processing.
Request data portability.
Withdraw consent at any time.
Lodge a complaint with a supervisory authority (for Bulgaria, the Commission for Personal Data Protection).
To exercise your rights, contact us at hello@vccompass.co.
9. Information Security
We implement appropriate technical and organizational measures to protect your data, including:
Encrypted data storage by third-party processors (Kit, Google, Stripe, etc.)
Limited access to authorized personnel.
Secure transmission via HTTPS.
However, no online system is entirely risk-free. You use the Website at your own discretion.
10. Updates to This Policy
We may update this Privacy Policy from time to time. Significant changes will be announced via website banner or email notice. The date of the latest version is shown at the top of this document.
11. Contact
If you have any questions or wish to exercise your rights under this Policy, contact:
Compassio Ltd
Company Number: 208421277
Email: hello@vccompass.co
