POLICIES & STANDARDS
Data protection & GDPR.
A framework for discretion, accountable information sharing and individual rights.
THE RIGHT PEOPLE.
THE RIGHT MOMENT.
DOCUMENT CONTROL
Policy review & status
- Version
- 1.0 · Approved policy
- Last content check
- Policy owner
- AxonTerra Limited · Directors
- Next review
- Before public launch or a service change
Review scope & publication controls
This policy was approved on 28 October 2026. The content-check date records an editorial review of the current website, its enquiry-draft forms and the information about planned member services. Approval of this policy does not mean that the planned services are already operational.
- Confirm the company details, responsible contacts and live providers.
- Recheck the notice when forms, data collection, storage or member services change.
- Review amendments when services, providers or information handling change.
- Record each approved version and its review date.
This review record is maintained manually and does not update automatically when the page is visited.
Our standard
Information should be collected for a defined purpose, used on an appropriate lawful basis, limited to what is necessary, kept accurate, retained only as needed and protected with appropriate safeguards. These principles guide the planned service under the UK GDPR and Data Protection Act 2018, as amended.
Relationships are not a public directory
Membership does not give access to another member’s contact book or every opportunity. The intended process separates membership approval, permission to view an opportunity and permission to disclose particular names or documents.
Checks and sensitive information
Identity, company and authority checks will be scoped to the participant and assignment. Identity documents must be shared through a separately agreed secure channel. The website’s enquiry forms are not for submitting information for ‘know your customer’ (KYC) checks. Special-category and criminal-offence information require additional conditions and controls before any collection.
Research and outreach
Publicly available details are still personal information. Before approaching contacts identified through research, the business must assess the source, relevance, lawful basis, applicable electronic-marketing rules and arrangements for handling objections. Information about the source and use of personal data must be provided when required.
Access, security and accountability
The live service must apply role-based access, least-privilege permissions, secure document storage, audit records, withdrawal of access, recovery procedures and supplier checks. Data protection impact assessments are required where the proposed processing meets the relevant risk criteria. These controls form part of the planned member portal; they are not currently provided by this website.
Suppliers and international transfers
Before introducing a customer relationship management (CRM) system, identity checks, electronic signatures, automated email services or a deal room, the business must confirm provider roles, processing agreements, locations and any required transfer safeguards. A separate data notice will describe the live arrangements.
Your information
See the privacy policy for this website’s current behaviour, contact details and how to raise a rights request. This page explains the planned operating standard and does not certify the business as compliant.
Reference: ICO guidance on UK GDPR.
