Privacy Policy

This Privacy Policy applies to MYRA Compliance, a product of MYRA Compliance Ltd (Company Number: 16430310), incorporated on 6 May 2025.

MYRA Compliance Ltd is the Data Controller for personal data collected through the MYRA Compliance platform and website.

We may collect and process the following categories of personal data:

• Account & Identity Data: Full name, email address, job title, and role within your organisation
• Contact Data: Email address, phone number, and company name
• Company Data: Organisation name, industry, company size, and registered address
• Usage Data: How you interact with our platform, features used, and activity logs
• Technical Data: IP address, browser type, device information, and cookies
• Employee Records: Data you upload about your employees for safety management purposes (e.g. training records, certifications)
• Communications: Messages you send us via our contact form or email

• Directly from you: when you register, fill in a contact form, or communicate with us
• Automatically: through cookies and similar technologies when you use our website or platform
• From your organisation: when your employer invites you to use the platform

We process personal data for the following purposes and under the following legal bases under UK GDPR:

• Contract performance: to provide and manage your MYRA Compliance subscription and account
• Legitimate interests: to improve our platform, prevent fraud, and provide customer support
• Legal obligation: to comply with applicable laws and regulations
• Consent: for marketing communications (you may withdraw consent at any time)

We may share your data with trusted third parties only where necessary:

• Cloud infrastructure providers: for hosting and data storage
• Payment processors: for handling subscription billing securely
• Email service providers: for transactional and support communications
• Analytics providers: for understanding platform usage (anonymised where possible)
• Legal and regulatory authorities: where required by law

All third party processors are contractually bound to handle your data securely and in accordance with UK GDPR.

We retain personal data only for as long as necessary:

• Active accounts: For the duration of your subscription plus 12 months after cancellation
• Contact form enquiries: Up to 2 years
• Legal and financial records: Up to 7 years as required by law

After these periods, data is securely deleted or anonymised.

You have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data ("right to be forgotten")
• Right to restrict processing: ask us to limit how we use your data
• Right to data portability: receive your data in a structured, machine readable format
• Right to object: object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at enquiries@myracompliance.com. We will respond within 30 days.

We use cookies and similar technologies to ensure the platform functions correctly and to understand how it is used. These include:

• Essential cookies: required for the platform to operate (cannot be disabled)
• Analytics cookies: help us understand usage patterns (you can opt out)

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Access controls and role based permissions
• Regular security reviews and monitoring
• Secure data centres within the UK/EEA

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay.

Where we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, such as UK Adequacy Regulations or Standard Contractual Clauses (SCCs), in compliance with UK GDPR Chapter V.

If you have concerns about how we handle your personal data, please contact us first at enquiries@myracompliance.com and we will do our best to resolve the issue.

If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or via a notice on the platform. The "Last updated" date at the top of this page will always reflect the most recent revision.

Continued use of MYRA Compliance after changes are posted constitutes acceptance of the updated policy.

For any privacy questions or to exercise your rights, please contact us: