We implement technical and organisational measures including:
Encryption of data in transit and at rest
Role-based access controls
Strong authentication procedures
Regular security assessments
Staff training and awareness
Incident response protocols
If a data breach occurs, we will assess the impact within 48 hours and, where required, notify the Information Commissioner’s Office (ICO) and affected individuals without undue delay.