Safe & Smart Tech

The company demonstrates an exemplary regulatory compliance program, actively monitoring changes in laws and regulations, updating policies, providing business-wide mandatory training for high-risk areas including GDPR, and ensuring all major policies are reviewed annually by the Board or Audit Committee.

It is registered as a data controller with the Information Commissioner’s Office. The company also exhibits excellent data minimization practices, retaining data only as long as necessary, avoiding collection of children's data or sensitive data (unless for employment), and aggregating personal data for statistical purposes. Furthermore, it maintains excellent data governance, stating it will never sell, rent, or swap personal data without clear disclosure and implementing controls to limit unauthorized modification or misuse. Users are provided with comprehensive data control rights, including the ability to opt-out of direct marketing, access, correct, delete, and restrict their personal data, and the right not to be subject to automated decision-making. The company has not reported any data breaches in the past year (up to August 2025) and has a strong security program with preventative measures, including dedicated investments, 24/7 security monitoring, advanced AI-driven threat detection, and specialist testing. It also has good vulnerability management practices, including a patch management process and an ongoing security assurance program. Employee security training is good, with programs deployed to improve vigilance against social engineering attacks, including phishing attempts, and cyber incident simulations with learnings implemented.