Privacy
Privacy
Personal data should be collected only when it is needed, and handled deliberately.
- Updated:
This page sets out the standards Vitalos works to and is putting in place. They are commitments, not certified controls.
On this website
- Enquiry forms collect only what is needed to respond to and qualify an enquiry.
- Enquirers are not subscribed to marketing.
- Our standard is to keep personal data out of general platform logs.
In client delivery
Our standard is that:
- where delivery involves personal data, its purposes, collection, access, retention, third-party processing and deletion are made visible;
- whether Vitalos acts as controller or processor is assessed, with a data processing agreement where Vitalos processes data on a client's behalf;
- higher-risk processing goes through a data protection impact assessment;
- legal interpretation is escalated to qualified advisers, because engineering judgement does not replace legal advice.
The website privacy notice sets out how personal data is handled through this site.