Privacy Policy
Effective: 2026-09-30·Operator: Stephan Kulik (Cyprus)
Who we are
This site (compliancestronghold.com) is operated by Stephan Kulik, an individual based in Cyprus and the data controller for the purposes of the GDPR. Postal address: 111 Chlorakas Avenue, Shop 9, Suite 546, 8220 Chloraka, Paphos, Cyprus. Contact: contact@compliancestronghold.com. See also the imprint.
What data we collect
- Analytics data (Google Analytics 4): page views, referrer, device type, browser, approximate geo-location (country/region), and interaction events such as clicks on affiliate links. Nothing is collected before you choose: until you accept analytics in the consent banner, the Google Analytics script is not loaded, no request is sent to Google and no analytics cookies are set. If you decline, it stays that way.
- Email correspondence: retained only as long as necessary to respond and resolve the matter.
- We do not operate user accounts, run newsletters, or collect names, phone numbers, or payment data.
Legal basis (GDPR)
- Analytics: consent under Art. 6(1)(a) GDPR, managed via the consent banner.
- Email correspondence: legitimate interest under Art. 6(1)(f) GDPR.
Cookie consent management
On your first visit a consent banner asks you to Accept analytics or
Decline. Your choice is stored in your browser's local storage as
compliancestronghold-consent and applies only to that device and browser. Accept and Decline are
stored the same way and for the same time: until you change your choice or clear your browser's
site data. If you decline, Google Analytics is never loaded and no analytics cookies are set.
To change or withdraw your choice at any time, use the Cookie settings button in the footer of every page. It reopens the consent banner; choosing Decline there switches analytics off and deletes the Google Analytics cookies already set on this site.
Cookies and similar storage we use
| Name | Category | Set by | Purpose | Retention |
|---|---|---|---|---|
compliancestronghold-consent (local storage, not a cookie) | Strictly necessary | Compliance Stronghold (first party) | Remembers whether you accepted or declined analytics. | Until you change your choice or clear site data |
_ga | Analytics (only after you accept) | Google Analytics 4 (first-party cookie on compliancestronghold.com) | Distinguishes users. | 2 years |
_ga_0BFW9D7DFP | Analytics (only after you accept) | Google Analytics 4 (first-party cookie on compliancestronghold.com) | Persists session state. | 2 years |
Names, purposes and the 2-year default expiry of the GA4 cookies are as documented by Google in [GA4] Cookie usage on websites. Browsers may delete them sooner if you do not return (Google notes a 400-day cap in Chrome and 7 days in Safari). We do not use advertising cookies.
Affiliate links
Outbound links to the products we review may be affiliate links; the destination site may set its own cookies and attribute your signup to us after you click through. Details in the affiliate disclosure.
Third parties
- Google (Google Analytics 4) — policies.google.com/privacy · loaded, and cookies set, only after you accept
- The vendors we link to — each sets its own cookies on its own domain after you click through.
Your rights (GDPR)
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. Contact contact@compliancestronghold.com. You may also lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) or your local supervisory authority.
Changes
We may update this policy as Compliance Stronghold evolves; the effective date above reflects the latest revision.