Data Protection

Personal information is processed only where there is a lawful basis and where processing is necessary and proportionate to a defined intelligence requirement. Scope is agreed with the client before work begins.

We do not claim, seek, or use access to protected government or law-enforcement systems, and we decline instructions that would require it.

We collect what the requirement needs and no more. Where a line of enquiry would be intrusive without materially improving the assessment, it is not pursued.

Client material is held with access restricted to the analysts working on the engagement. Reporting routes and handling arrangements are agreed at the outset.

Retention periods are agreed with the client and reflect the nature of the engagement. Continuity matters in protective intelligence, so retention is deliberate rather than indefinite by default, and material is disposed of securely at the end of the agreed period.

We respond to requests concerning personal information in line with applicable law and our obligations to clients. Requests can be made through our contact page.