Information management policy

We value information as a Group asset and are fully committed to its effective management for the efficient running of our operations and meeting our strategic objectives.

We value information as a Group asset and are fully committed to its effective management for the efficient running of our operations and meeting our strategic objectives. We aim to balance our statutory, regulatory and contractual obligations and our desire to be open and responsive with our duties of confidentiality for personal and commercially sensitive information. We will handle, process, create and manage all information effectively and efficiently, make it accessible to authorised personnel and third parties when needed, but protect and store it securely and dispose of safely at the appropriate time.

We aim to achieve this by taking all reasonable steps to:

• comply with all relevant legislation, regulatory, and contractual requirements whilst achieving standards of best practice

• provide supporting processes, procedures, standards, guidelines and resources as necessary

• review this policy regularly to ensure it continues to be relevant

• identify and manage risks to protect information throughout its lifecycle

• safeguard information whether belonging to the Group, our clients or partners against unauthorised modification, disclosure, loss or theft

• ensure our intellectual property rights (IPR) are protected

• ensure information is available promptly for authorised access when required

• eliminate duplication, ambiguity and redundancy

• raise awareness of this policy and the need to adhere to it

• monitor, measure and improve information management practices to ensure effectiveness and adherence to the policy

• manage incidents so as to minimise the impact, and learn from them to prevent recurrence, and

• establish clear responsibility for managing information assets and resources.

This policy applies to:

• all information, irrespective of format, which has been created, gathered and processed for the business of the Group

• any systems or procedures for the management of information, and

• all permanent and temporary employees, contractors, consultants, third party providers of services, and seconded employees.