Purpose and minimisation
Collect only information needed for accounts, verification, consent, ledger, support and security.
Requires legal review before production publication.
Collect only information needed for accounts, verification, consent, ledger, support and security.
Access follows ownership and roles. Final retention periods and legal bases require review.
Users may request access, correction or deletion subject to law and record-retention duties.