SLD Privacy & Data Protection Policy™
Personal Data Governance Across SLD Digital, Client and Professional Activities
1. PURPOSE
The SLD Privacy & Data Protection Policy™ establishes how SLD handles personal data within its public, client, communication, operational, and professional-network activities. It provides a single policy layer for responsible data handling without duplicating broader technology, confidentiality, or records governance.
2. SCOPE
This Policy applies to personal data processed through SLD websites, forms, email and communications, Insight subscriptions, client relationships, client portals where used, the Professional Network, operational systems, analytics, and future connected tools or integrations adopted by SLD.
3. DATA MINIMIZATION
SLD collects personal data only where it enables a real function, improves a decision, creates a meaningful client experience, supports an operational requirement, or supports a legitimate revenue activity.
SLD should avoid collecting information merely because a system can collect it.
4. PURPOSE AND USE
Personal data is used for the purpose for which it is reasonably collected, including responding to enquiries, assessing opportunities, communicating with clients or professional participants, delivering agreed work, maintaining operational records, supporting Insight communications, improving relevant digital experiences, and carrying out legitimate business administration.
5. ACCESS AND DISCLOSURE
Access to personal data is limited to people or systems that require it for an authorized SLD function. Personal data is not treated as general-purpose information simply because it is held within an SLD system.
Where external tools or professional participants are used, access is limited to the function they are authorized to perform and remains subject to applicable SLD controls.
6. CLIENT AND PROFESSIONAL NETWORK DATA
Client and Professional Network data is handled according to role, purpose, and operational need. Client relationship governance remains with SLD under DOC-11; this Policy governs the personal-data dimension of those relationships.
7. DIGITAL COLLECTION AND COMMUNICATION
Public forms and communications should request only information relevant to the stated interaction. Subscription, contact, enquiry, and similar mechanisms should provide a clear purpose for the information requested.
Website analytics and related measurement should be purposeful and proportionate to the business or user-experience decision they support.
8. RETENTION AND RECORDS
Personal data is retained only for as long as the relevant business, operational, relationship, evidentiary, or governance purpose requires, subject to applicable SLD recordkeeping requirements.
Where a record must be preserved under SLD governance, the retention decision is made through the applicable repository and records controls rather than by this Policy alone.
9. DATA QUALITY AND SECURITY
SLD takes reasonable operational measures to maintain the accuracy, confidentiality, integrity, and controlled accessibility of personal data within its systems and workflows. Personal data that is no longer required should not remain active merely through inattention.
10. PRIVACY INCIDENTS
Suspected loss, unauthorized access, inappropriate disclosure, material misuse, or other privacy-related incident involving SLD-controlled personal data must be escalated through the appropriate SLD governance path for assessment, containment, documentation, and further action as warranted.
11. GOVERNANCE BOUNDARY
DOC-01 remains the constitutional authority. DOC-04 governs digital identity, technology, automation, AI, and digital operating controls. DOC-05 governs controlled records and repository practices. DOC-07 through DOC-10 govern the applicable client-acquisition and commercial processes. DOC-11 governs client and Professional Network relationship boundaries.
This Policy governs personal-data handling across those activities without replacing their underlying authority.
12. FUTURE SYSTEMS
When SLD introduces a new platform, integration, portal, analytics function, automation, or other data processing capability, privacy and data-minimization considerations should be assessed before the capability becomes an established operating practice.
GOVERNING STATEMENT
SLD treats personal data as purpose-bound operational information: collected deliberately, used for defined functions, accessed appropriately, retained deliberately, and governed as the operating environment evolves.
DOCUMENT STATUS
Adopted as part of the SLD Enterprise Library. Effective upon production and controlled registration.