Data and privacy
Data and privacy
How we classify, retain, protect and manage personal and customer data.
Data retention and deletion procedures
01Retention periods are defined by data type, with secure deletion when information is no longer required.
Data classification policy
02Information is classified by sensitivity to determine handling, access and encryption requirements.
Data Processing Agreements with subprocessors
03Subprocessors are bound by contractual data-protection terms consistent with applicable data protection requirements.
Data subject request process
04A defined workflow supports requests for access to or erasure of personal data within applicable timeframes.
Data minimisation by design
05We seek to collect and retain only the data required to provide a service or feature.
Regional data residency options
06Customer data residency requirements can be discussed and agreed during onboarding where supported.