Generally, we collect personal and business information directly from you when you contact or deal with us. We protect this information in a number of ways. It is kept in secure locations, and access to it is restricted to those who have the appropriate authorisation under our policies. Where we share the information with third parties, we ensure they also have appropriate policies and security in place. When the information is no longer required, it is de-identified, deleted, or securely destroyed.