As part of my work, I am sent documents that constitute my clients’ intellectual property, which I retain in order to complete the work they have hired me to perform. I am happy to enter into a specific Confidentiality Agreement with my clients but, even where this has not been done, I operate my business in line with best industry practice as regards non-disclosure, confidentiality, and protection of intellectual property.
GDPR
I only ask clients to provide the data necessary to comply with HMRC tax regulations, i.e., a name and address for the invoice. I store this information in my emails, on my laptop hard drive, and in the Cloud for six years, whereupon it is deleted. I do not use mailing lists, or store clients’ data. I never send unsolicited emails to clients or prospective clients. I do not sell data or pass it on to any other entity.
Storage of documents with sensitive personal data
Since I only work on academic documents prior to their publication, these have invariably been stripped of any sensitive personal data before I receive them. I do not share any data with any other editors, proofreaders, businesses or third parties (with the exception of HMRC if requested to do so for the purposes of an audit).
Force majeure
I operate my business as a sole trader and I have no employees. Nor do I send work out to sub-contractors. In the event that I am, for whatever reason, unable to work, my husband, Nigel Driffield, will have access to my emails to contact current clients to advise them of the situation and return to them any outstanding documents. Nigel Driffield will not save or copy those details for his own use, and he will make it clear that he is the author of any emails he sends from my account.