Privacy Policy

Your data privacy is the core of our operations and a non-negotiable commitment.

Encrypted at Rest & in Transit
GDPR Compliant
SOC 2 Ready
We Never Sell Data

Last updated: July 2026

Our Core Commitment

At ExGear Insight, protecting your data isn't just a legal obligation—it's the foundation of everything we do. We understand that as a GRC and audit platform, we handle some of your most sensitive organisational information. That's why we've built our entire infrastructure around the principle of Privacy by Design.

"Your data belongs to you. We are merely its custodian, and we treat that responsibility with the utmost seriousness."

Information We Collect

Account Information

  • Name and email address
  • Organisation name and role
  • Contact preferences
  • Authentication credentials (encrypted)

Platform Usage Data

  • Feature usage analytics
  • Performance metrics
  • Error logs for troubleshooting
  • Session information

How We Use Your Data

Service Delivery

Providing and improving the ExGear Insight platform

Security Monitoring

Detecting and preventing unauthorised access

Customer Support

Responding to enquiries and resolving issues

Product Improvement

Enhancing features based on usage patterns

What We NEVER Do

  • Sell your data to third parties
  • Use your data for advertising purposes
  • Share identifiable data without explicit consent
  • Access your audit data without authorisation

Data Security Measures

Encryption

Encrypted at rest and TLS in transit

Access Controls

Granular role-based permissions

Audit Logging

Complete activity trail

Evidence Integrity

SHA-256 tamper-evident trails

Regular Backups

Automated with redundancy

Security Reviews

Continuous hardening & monitoring

Your Rights

Under the UK GDPR, EU GDPR, and other applicable data protection laws, you have the following rights:

Right to Access — Request a copy of all personal data we hold about you
Right to Rectification — Correct any inaccurate or incomplete data
Right to Erasure — Request deletion of your personal data
Right to Portability — Receive your data in a portable format
Right to Object — Opt out of certain processing activities

⏰ Data Retention

We retain your data only as long as necessary:

  • Active Account Data: Retained while your subscription is active
  • Audit Logs: Retained for 7 years for compliance purposes
  • Backup Data: Purged within 90 days of deletion request
  • Marketing Preferences: Updated immediately upon request

Contact Our Privacy Team

Have questions about your data or want to exercise your rights? We're here to help.

Data Protection Officer

exoticallisticsm@exgear.io

Response Time

Within 30 days (usually faster)