Consent is collected via the engagement form.
Data processing agreements are available for clients.
We apply minimization and purpose limitation.
Access is restricted to designated project staff.
We respond within 30 days to GDPR-related requests and maintain audit trails.
Submit a GDPR request