We may receive confidential business, transaction, financial, operating and technology information. Its operating principles therefore include confidentiality, least-privilege access, data minimisation, secure storage, appropriate retention and controlled use of third parties.
Client or seller information is not intended for public AI tools. Where AI is used in delivery, the permitted environment, data use and level of human review are agreed for the relevant engagement.
Security principles
Least privilege, access control, secure storage, encryption where appropriate, environment separation, logging, vendor review, incident response and retention discipline. We describe security controls publicly only where they are implemented and can be evidenced.
Data handling
We separate the information needed to answer an enquiry from any optional marketing consent and publishes the relevant controller, purpose, lawful basis, retention, sharing, transfer and rights information in the Privacy Notice.