All policies
Data Protection Policy
How CXCAC safeguards personal and organisational data.
Last updated 2026-01-01
Principles
We process personal data lawfully, fairly, transparently and for specified purposes only.
Security
Data is encrypted in transit and at rest. Access is restricted to authorised staff on a need-to-know basis.
Retention
We retain personal data for the minimum time necessary to fulfil the purpose for which it was collected and to comply with legal requirements.
Breaches
Any personal data breach is investigated promptly and reported to affected individuals and authorities where required.