Compliance Risk Concepts
Client Login
compliance risk logo-2024

Compliance Risk Concepts (“CRC”) Privacy Policy

This policy sets forth CRC's practice regarding the collection, use, and disclosure of personal data when you use this Website and the choices you have associated with that data (“Privacy Policy”).

We use your data to provide and improve this Website. By using the Website, you agree to the collection and use of information in accordance with this Privacy Policy. Unless otherwise defined herein, terms used in this Privacy Policy have the same meanings as in CRC's Terms of Use.

1. Collection of Data

CRC collects several different types of information for various purposes in order to provide and improve the Website for your use.

Types of Data Collected

Personal Data
While using the Website, CRC may ask you to provide certain personally identifiable information that can be used to contact or identify you ("Personal Data"), which may include, but is not limited to:

Email address
First name and last name
Phone number
Address, State, Province, ZIP/Postal code, City
Cookies and Usage Data

Your Personal Data may be used to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications by following the unsubscribe link or instructions provided in any email sent to you by CRC.

Use of Cookies
CRC's policy on use of cookies for the Website can be found under Cookie Policy.

Usage Data
CRC may also collect information on how the Website is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages on the Website that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

2. Use of Data

CRC uses the collected data for various purposes:

  • To provide and maintain this Website
  • To notify you about changes to this Website
  • To allow you to participate in interactive features of this Website when you choose to do so
  • To provide customer support
  • To gather analysis or valuable information so that we can improve the website
  • To monitor the usage of this Website
  • To detect, prevent and address technical issues
  • To provide you with news, special offers and general information about other goods, services and events which CRC offers that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information

3. Legal Basis under General Data Protection Regulation (GDPR)

For a citizen or resident of a member country of the European Union (EU) or the European Economic Area (EEA), the legal basis for collecting and using Personal Data described in this Privacy Policy depends on the Personal Data being collected and the specific context in which it is collected as described below:

CRC may process your Personal Data because:

  • CRC needs to perform a contract with you
  • You have given us permission to do so
  • The processing derives from CRC's legitimate interests while your applicable rights are not
  • CRC must comply with applicable law

4. Retention of Data

CRC will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. CRC will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if CRC is required to retain your Personal Data to comply with applicable laws), resolve disputes, and enforce legal agreements and policies.

CRC will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the Website, or CRC is legally obligated to retain such data for longer time periods.

5. Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside Hong Kong and choose to provide your information to CRC, please note that CRC transfers the information provided by you through the Website, including your Personal Data if any, to Hong Kong Special Administrative Region, PRC (“Hong Kong”) and process it in Hong Kong.

Your use of the Website under the CRC Terms of Use followed by your submission of your personal information constitutes your unreserved agreement to this Privacy Policy in general and the transfer of data under this policy in particular.

CRC will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

6. Disclosure of Data

Legal Requirements

CRC may disclose your Personal Data in good faith belief that such disclosure is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of CRC
  • To prevent or investigate possible wrongdoing in connection with the Website
  • To protect the personal safety of users of the Website or the public
  • To protect against legal liability

7. Security of Data

The security of your data is important to CRC, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While CRC strives to use commercially acceptable means to protect your Personal Data, absolute security cannot be guaranteed.

8. Rights Under General Data Protection Regulation (GDPR)

If you are a citizen or resident of a member country of the European Union (EU) or the European Economic Area (EEA), you have certain data protection rights. CRC aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data CRC holds about you and if you want it to be removed from our systems, please contact us at 

In certain circumstances, you have the following data protection rights:

  • The right to access, update or to delete the information CRC has on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
  • The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
  • The right to object. You have the right to object to our processing of your Personal Data.
  • The right of restriction. You have the right to request that CRC restricts the processing of your personal information.
  • The right to data portability. You have the right to be provided with a copy of the information CRC has on you in a structured, machine-readable and commonly used format.
  • The right to withdraw consent. You also have the right to withdraw your consent at any time where CRC relied on your consent to process your personal information.

Please note that CRC may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in EU or EEA.

9. Service Providers

CRC may employ third-party companies and individuals to facilitate the Website, to provide the Website on our behalf, to perform website-related services or to assist us in analyzing how the Website is used ("Service Providers").

These Service Providers have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Social Media
CRC may use social media plugins to enable a better user experience with the use of the Website

CRC uses the YouTube video platform operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA. YouTube is a platform that enables playback of audio and video files. On some pages of the Website, the integrated YouTube player establishes a connection to YouTube in order to ensure the technical transmission of the video or audio file. When the connection to YouTube is established, data is transferred to YouTube. For information about the scope and purpose of data collection, the further processing and use of the data by YouTube and your rights and the settings you can configure to protect your privacy, please refer to the YouTube Privacy Guidelines.

CRC may use Service Providers to monitor and analyze the use of the Website.

Google Analytics
CRC uses Google Analytics on the Website for anonymous reporting of site usage and for advertising on the Website. If you would like to opt-out of Google Analytics monitoring your behavior on the Website please use this link: /dlpage/gaoptout/.

10. Links to Other Sites

This Website may contain links to other sites that are not operated by CRC. If you click on a third-party link, you will be directed to that third-party's site. You’re advised to review the privacy policy of each non-CRC site you decide to visit.

CRC has no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

11. Changes to This Privacy Policy

CRC may update this Privacy Policy from time to time. Such changes will be posted on this page. The effective date of such changes will be notified via email and/or a prominent notice on the Website, with an update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy, please contact, or write us at:

Compliance Risk Concepts

Attn: Data Protection Officer

40 Exchange Place, Suite 402 New York,

New York 10005

Copyright Compliance Risk Concepts | All Rights Reserved © 2023 | Privacy Policy