Trust & Security

Data Protection

Protecting data. Preserving trust.

Last updated: August 25, 2026

Introduction

We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal and business information entrusted to us.

1. Data Processing Principles

All data processing activities adhere to these core principles:

  • Lawfulness: Data is processed lawfully, fairly, and transparently
  • Purpose Limitation: Data is collected for specified, legitimate purposes
  • Data Minimisation: We collect only what is necessary
  • Accuracy: Data is kept accurate and up to date
  • Storage Limitation: Data is retained only as long as necessary
  • Integrity & Confidentiality: Appropriate security measures are applied

2. Technical Measures

  • Encryption of data in transit and at rest
  • Regular security assessments and vulnerability scanning
  • Secure backup and disaster recovery procedures
  • Network security and monitoring
  • Secure software development lifecycle

3. Organisational Measures

  • Data protection awareness and training
  • Access control policies and procedures
  • Confidentiality agreements with all team members
  • Vendor and third-party due diligence
  • Regular policy reviews and updates

4. Data Subject Rights

We respect and facilitate the exercise of data subject rights including:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object

5. Data Breach Management

In the event of a data breach, we follow a defined incident response process including assessment, containment, notification of affected parties where required, and implementation of corrective measures.

6. International Transfers

Where data is transferred internationally, we ensure appropriate safeguards are in place to protect data in accordance with applicable data protection laws.

7. Contact

For data protection enquiries: