We have implemented appropriate technical and organisational measures to safeguard personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. Personal data is processed only to the extent necessary and is retained for no longer than is required for the purposes for which it was collected.