Privacy & Data Governance
Data Direct maintains administrative, technical and organisational measures designed to protect the personal information it handles.
Our privacy and data-governance processes consider the requirements applicable to each service and market. We review these processes periodically and obtain specialist guidance where appropriate.
Data Direct applies administrative, technical and organisational measures intended to help protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure.
Security measures and access controls are reviewed periodically and adjusted having regard to the nature of the information handled and the relevant service and market.
Data Direct maintains suppression information to help prevent further use of records where an applicable objection, withdrawal or opt-out has been recorded.
Suppression updates may be provided to clients at intervals agreed under the relevant licensing arrangement. Clients are responsible for applying current suppression information and meeting their own legal and campaign obligations.
Individuals may contact Data Direct regarding the use of their personal information. Depending on the request and applicable requirements, we may need to verify the requester's identity before accessing, correcting, suppressing or deleting information.
Requests are handled through established privacy processes and within applicable timeframes. Depending on the situation, information may need to be retained on a suppression list so the individual is not re-added.
Clients are responsible for using data supplied by Data Direct only for the purposes, channels and markets approved under the applicable licensing agreement, and for meeting their own legal, regulatory and campaign obligations in connection with that use.
This includes applying current suppression information supplied by Data Direct and promptly notifying us of any privacy request a client receives that relates to data we have supplied.
Privacy and data-protection requirements vary by market. Where relevant, Data Direct maintains market-specific policies and documentation addressing the applicable legal framework, and considers these requirements when sourcing, licensing and supplying data for a particular market.
See our Privacy Policy for the market-specific variant applicable to a given jurisdiction, and the Privacy & Compliance Portal for further compliance documentation.
