Privacy Policy
You can read every page and use the calculator and comparison tools without giving us any personal data. We handle personal data only when you write to us through the contact form, plus the technical data our host and Google Fonts receive when a page loads.
Who is responsible for your data?
SOC 2 Startup Guide (soc2startups.com) is published by Alegria Media and Consulting Ltd. ("we", "us"). We are the controller of the personal data described here. The site has no user accounts, no payments and no comments. To reach us about privacy, use the contact form and choose "Privacy request".
What do we collect?
Contact form. When you send a message we receive your name, email address, the topic you chose and your message. For a copyright notice we also receive the details you add about the work, the material and your electronic signature.
Hosting logs. Like any website, our hosting provider automatically logs technical data for each request: IP address, browser and device details, the page requested and the time. These logs are used for security and to keep the site running.
Browser storage. The site does not set cookies and does not write to localStorage or sessionStorage. The path finder and multi-compare tools keep your choices in the page address (for example ?v= and ?w=), which stays on your device unless you share the link.
Third parties. Pages load fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When fonts load, Google receives your IP address and browser details. The site loads no analytics, advertising or other third-party scripts.
Why do we use it, and on what legal basis?
Under the GDPR and UK GDPR we rely on our legitimate interests to operate and secure the site and to answer messages you send us. Where the law requires consent, we ask for it and you can withdraw it at any time.
Is data processed outside your country?
It can be. Our providers may process data in other countries. Where that happens we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses. Israel, where the operator is established, has an adequacy decision from the European Commission.
How long do we keep it?
Contact messages are kept for as long as we need them to handle your request and are then deleted. Server logs are kept for a limited period set by the hosting provider.
What are your rights?
EU and UK. You can ask for access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, withdraw consent, and complain to a data protection supervisory authority.
California (CCPA/CPRA). You can ask to know and to delete the personal information we hold, to correct it, and to opt out of its sale or sharing (we do neither). We will not discriminate against you for using these rights.
Israel. Under the Israeli Privacy Protection Law you can ask to review the data we hold about you and to have it corrected or deleted.
To use any of these rights, send a message through the contact form and choose "Privacy request". We may ask for information to confirm the request is yours.
Is the site meant for children?
No. The site is not directed to children under 16, and we do not knowingly collect their data.
Will this policy change?
If what the site does with data changes, we update this page and the "Last updated" date above.