01Principles
We collect only what we need, keep it accurate, store it securely and retain it only as long as necessary.
02Security Measures
Access controls, encryption in transit and least-privilege access for our team, applied to the systems and business records we operate.
Where we hold personal data in our own systems, we maintain backups of those records as part of our internal continuity practice.
This does not extend to data you host in your own hosting or VPS environment. Backups of those environments are not included unless expressly contracted — see the Service Level Agreement, under "Backups & Your Data".
03Breach Response
In the unlikely event of a data breach, we will act promptly to contain it and notify affected parties as required by law.