Retention and confidentiality

We retain client information only for the period needed to deliver the agreed work and meet legal obligations. Client material is treated as confidential and is not shared outside HIMLOK except as the client directs or the law requires.

Consent is recorded at the start of each engagement and can be withdrawn in writing at any time.

Operational inputs and correspondence

Technical correspondence and operational inputs are used to answer requests, maintain service records, and improve the accuracy of specifications. They are kept in the same secure systems as other client records.

Correspondence is reviewed only by staff who need it to respond to you.

Secure storage and access

Stored records are protected by access controls that limit each file to named staff. Access is logged, and records are reviewed on a regular schedule to remove data that is no longer needed.

Where a third party processes data for us, we require written terms covering confidentiality and deletion.

Your privacy rights and recourse

You may request a copy of the information we hold about you, ask for corrections, or ask for deletion where the law allows. Requests are answered in writing, and you may raise a concern with us at any time using the contact page.

If a concern is not resolved, you may refer it to the relevant data protection authority in your jurisdiction.