We also have an internal Group Data Protection policy which is reviewed annually and documents the risks that need to be managed and the minimum control standards that need to be adhered to, to ensure all personal information is protected and an individual’s right to privacy is observed at all times.