Personal Data Protection

This document is under review by legal counsel and may change.

Our principles

We design our systems to collect only what is needed, use it only for the stated purpose, and make data-subject rights genuinely exercisable.

Access separation

In CPMS, access to data is separated by organisation and by user role. Each organisation sees only its own data, and user actions are recorded for later review.

Deployment in your own environment

For enterprise clients with specific data-residency requirements, we support deployment to a Private Cloud or your own servers so data stays within your control.

Exercising your rights

To exercise your rights under the Personal Data Protection Act, contact us through the channels on our contact page. We will respond within the period required by law.