Collect
Limit collection to information relevant to an enquiry, supplier relationship or research project.
Trust & Compliance / Data protection
Follow the information through its lifecycle.
A governance overview for procurement, privacy teams and research operations—from collection to deletion.
- Resource
- Operational overview
- Last updated
- 25 August 2026
Process
Use information for defined business, research, quality, security and legal purposes.
Transfer
Share on a need-to-know basis with clients, approved suppliers and service providers under appropriate terms.
Store
Use access controls and server-side credentials appropriate to the system and information involved.
Retain
Keep records only for operational, contractual, legal, security or dispute-related needs.
Delete
Delete, anonymize, return or securely dispose of information when the applicable need ends.
Vendor onboarding
Need additional vendor documentation?
Prospective clients, procurement teams and research partners may request supporting information for due diligence. Documentation is provided by request and subject to availability, confidentiality and appropriate review.