[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"site-settings":3,"site-seo":63,"slug-security":66},{"footer":4,"header":40,"logo":62},{"address":5,"ctaHref":6,"ctaIntro":7,"ctaLabel":8,"emailHref":9,"emailLabel":10,"legalLinks":11,"legalNote":28,"phoneHref":29,"phoneLabel":30,"socialLinks":31},"Outthought\nFuel Studios\nPottergate\nNorwich NR2 1DX","\u002Fcontact","Looking for help with creative clarity?","Get in touch","mailto:studio@outthought.co.uk?subject=Howdy!","studio@outthought.co.uk",[12,16,19,22,25],{"fileUrl":13,"href":14,"label":15},null,"\u002Fprivacy","Privacy policy",{"fileUrl":13,"href":17,"label":18},"\u002Fsecurity","Security and data processing",{"fileUrl":20,"href":13,"label":21},"https:\u002F\u002Fcdn.sanity.io\u002Ffiles\u002Fgh82p045\u002Fproduction\u002Fa46b868329de54a9dd93a25553c0a9a92c193ca3.pdf","Diversity & inclusion",{"fileUrl":23,"href":13,"label":24},"https:\u002F\u002Fcdn.sanity.io\u002Ffiles\u002Fgh82p045\u002Fproduction\u002F906fcff89ea6d5984788c01c92f0daaabb5f8b61.pdf","Carbon reduction",{"fileUrl":13,"href":26,"label":27},"https:\u002F\u002Fregistry.blockmarktech.com\u002Fcertificates\u002F5c8bb2a9-5d83-4bd4-9d75-2e5832100178\u002F?source=WEB","Cyber Essentials Certified","Outthought is a trading name of Think Marketing Ltd","tel:+441603552602","+44 [0]1603 552 602",[32,36],{"_key":33,"href":34,"label":35},"ffe6a13d298a","https:\u002F\u002Fuk.linkedin.com\u002Fcompany\u002Fout-thought","LinkedIn",{"_key":37,"href":38,"label":39},"cc81684bc1b1","https:\u002F\u002Fwww.instagram.com\u002Foutthoughtout\u002F","Instagram",{"contactHref":6,"contactLabel":41,"logo":42,"navLinks":45},"Contact",{"_type":43,"alt":44},"image","Outthought",[46,50,54,58],{"_key":47,"href":48,"label":49},"259dfb275b6a","\u002Fservices","Services",{"_key":51,"href":52,"label":53},"38bad5eff59c","\u002Fwork","Work",{"_key":55,"href":56,"label":57},"9d537b4ef142","\u002Fstudio","Studio",{"_key":59,"href":60,"label":61},"953f4efa24f3","\u002Fblog","Blog",{"_type":43,"alt":44},{"defaultDescription":13,"defaultShareImage":13,"logo":64,"separator":13,"siteName":44,"social":65,"twitter":13},{"_type":43,"alt":44},[34,38],{"kind":67,"doc":68},"legal",{"_id":69,"body":70,"iconUrl":287,"lastUpdated":13,"seo":13,"slug":288,"title":289},"legalPage.security",[71,83,91,100,116,123,131,143,155,167,179,191,198,206,216,224,232,240,248,256,264,272,279],{"_key":72,"_type":73,"children":74,"markDefs":81,"style":82},"bb6b8046a44c","block",[75],{"_key":76,"_type":77,"marks":78,"text":80},"100026b7dca6","span",[79],"strong","Last updated: June 2026",[],"normal",{"_key":84,"_type":73,"children":85,"markDefs":90,"style":82},"c7523d13afd7",[86],{"_key":87,"_type":77,"marks":88,"text":89},"cb1d4f823c1b",[79],"",[],{"_key":92,"_type":73,"children":93,"markDefs":98,"style":99},"6579439e0a6f",[94],{"_key":95,"_type":77,"marks":96,"text":97},"3ca40e516638",[],"1. Regulatory foundation",[],"h2",{"_key":101,"_type":73,"children":102,"markDefs":115,"style":82},"afffc0d196a6",[103,107,111],{"_key":104,"_type":77,"marks":105,"text":106},"c10a2f0ad6ec",[],"We operate under ",{"_key":108,"_type":77,"marks":109,"text":110},"55de873e7a27",[79],"UK GDPR and the Data Protection Act 2018",{"_key":112,"_type":77,"marks":113,"text":114},"ca69c068aab9",[],", ensuring all personal data processing is compliant.",[],{"_key":117,"_type":73,"children":118,"markDefs":122,"style":82},"450b8fac2299",[119],{"_key":120,"_type":77,"marks":121,"text":89},"1a48b2e88249",[79],[],{"_key":124,"_type":73,"children":125,"markDefs":130,"style":99},"0cf83b00b06d",[126],{"_key":127,"_type":77,"marks":128,"text":129},"abc464398688",[],"2. Data processing lifecycle controls",[],{"_key":132,"_type":73,"children":133,"markDefs":142,"style":82},"5f5f009f4ef2",[134,138],{"_key":135,"_type":77,"marks":136,"text":137},"d10d109386e0",[79],"a. Data collection and receipt",{"_key":139,"_type":77,"marks":140,"text":141},"da9c0cf44a3e",[],"\nWe only collect data necessary for providing services (e.g. emails, project assets, analytics) and inform clients about purposes and lawful bases (e.g. contractual necessity, consent, legitimate interest).",[],{"_key":144,"_type":73,"children":145,"markDefs":154,"style":82},"010b8ef3f7d5",[146,150],{"_key":147,"_type":77,"marks":148,"text":149},"fd8d0f2f6789",[79],"b. Storage and access controls",{"_key":151,"_type":77,"marks":152,"text":153},"824f3646e9ff",[],"\nPersonal and business data are held securely using appropriate technical and organisational measures, designed to prevent unauthorised access, alteration, loss, or disclosure.",[],{"_key":156,"_type":73,"children":157,"markDefs":166,"style":82},"7eac95cde09f",[158,162],{"_key":159,"_type":77,"marks":160,"text":161},"33ab91efe783",[79],"c. Use and processing",{"_key":163,"_type":77,"marks":164,"text":165},"3e455b91c6d8",[],"\nAccess to data is restricted to those who need it (e.g. internal team members, trusted third-party service providers under contract). All processing activities are documented and lawful.",[],{"_key":168,"_type":73,"children":169,"markDefs":178,"style":82},"303c018b1a7f",[170,174],{"_key":171,"_type":77,"marks":172,"text":173},"4b9e406d3cf4",[79],"d. Transmission and sharing",{"_key":175,"_type":77,"marks":176,"text":177},"f09567c18e8a",[],"\nWhen sharing data with third-party providers (e.g. IT support, accountants), we use secure channels and ensure they are bound by data protection obligations to preserve confidentiality and integrity.",[],{"_key":180,"_type":73,"children":181,"markDefs":190,"style":82},"90122a3ab2f3",[182,186],{"_key":183,"_type":77,"marks":184,"text":185},"05094b56fb49",[79],"e. Retention and disposal",{"_key":187,"_type":77,"marks":188,"text":189},"b4f2fd7e980f",[],"\nData is retained only as long as needed for its original purpose or legal\u002Fregulatory requirements (e.g. accounting). Upon expiry of retention periods, personal data is securely deleted or anonymised.",[],{"_key":192,"_type":73,"children":193,"markDefs":197,"style":82},"7ed9bdeead3d",[194],{"_key":195,"_type":77,"marks":196,"text":89},"2eb9652a7aab",[],[],{"_key":199,"_type":73,"children":200,"markDefs":205,"style":99},"0cac9a6aefc1",[201],{"_key":202,"_type":77,"marks":203,"text":204},"9c24d8a63674",[],"3. Supporting measures",[],{"_key":207,"_type":73,"children":208,"level":213,"listItem":214,"markDefs":215,"style":82},"3cc7854298a2",[209],{"_key":210,"_type":77,"marks":211,"text":212},"04d0082e1b45",[],"Technical safeguards such as encryption (whole‑disk, TLS), access logging and routine backups.",1,"bullet",[],{"_key":217,"_type":73,"children":218,"level":213,"listItem":214,"markDefs":223,"style":82},"a0056b75be60",[219],{"_key":220,"_type":77,"marks":221,"text":222},"c18b1777d9f5",[],"Organisational measures, including staff training, internal policies, and regular reviews to ensure continuing effectiveness.",[],{"_key":225,"_type":73,"children":226,"level":213,"listItem":214,"markDefs":231,"style":82},"5ecf26829d6e",[227],{"_key":228,"_type":77,"marks":229,"text":230},"164d5bc24cb7",[],"All third-party vendors are evaluated to ensure compliance with our security expectations.",[],{"_key":233,"_type":73,"children":234,"markDefs":239,"style":99},"e0e7063832d7",[235],{"_key":236,"_type":77,"marks":237,"text":238},"51ff91f52e9a",[],"4. Assurance and governance",[],{"_key":241,"_type":73,"children":242,"level":213,"listItem":214,"markDefs":247,"style":82},"8534ccdacf2b",[243],{"_key":244,"_type":77,"marks":245,"text":246},"2519d07ed28d",[],"We review and update our privacy and security policies periodically (last update: June 2025) and communicate any significant changes proactively.",[],{"_key":249,"_type":73,"children":250,"level":213,"listItem":214,"markDefs":255,"style":82},"5f3ce647bd50",[251],{"_key":252,"_type":77,"marks":253,"text":254},"ae9c61a19100",[],"Data subject rights (e.g. access, rectification, erasure) are actively supported, with processes in place for responding to requests promptly.",[],{"_key":257,"_type":73,"children":258,"markDefs":263,"style":99},"e87b00f436d8",[259],{"_key":260,"_type":77,"marks":261,"text":262},"5f3fd61db8b8",[],"Contact us",[],{"_key":265,"_type":73,"children":266,"markDefs":271,"style":82},"c4e635ed6b2e",[267],{"_key":268,"_type":77,"marks":269,"text":270},"7241bb1c2d1e",[],"If you have any questions about this Security and data processing policy or how we handle your personal data, please contact us at:",[],{"_key":273,"_type":73,"children":274,"markDefs":278,"style":82},"e165fbded13d",[275],{"_key":276,"_type":77,"marks":277,"text":10},"772a199d8ae6",[],[],{"_key":280,"_type":73,"children":281,"markDefs":286,"style":82},"82922eeda78e",[282],{"_key":283,"_type":77,"marks":284,"text":285},"b187df9db9e1",[],"Outthought\nFuel Studios\nPottergate\nNorwich. NR2 1DX",[],"https:\u002F\u002Fcdn.sanity.io\u002Fimages\u002Fgh82p045\u002Fproduction\u002F95bd1c79d302bf2b6873a58c75cc7247fdef344d-195x193.svg","security","Security"]