UK GDPR & Data Protection
Where we process personal data on your behalf we act as a processor under a written data processing agreement, on documented instructions, with agreed retention periods and sub-processor transparency. Data minimisation is applied at design time rather than audited for afterwards.