Privacy.
How personal data is handled is governed by the Privacy Policy and, for the data you connect, the Data Processing Addendum. This page summarises and links; it does not replace them.
Data Processing Addendum (pending legal drafting)
Not yet settled: Regulatory position
The UK GDPR, EU GDPR and PECR position is stated in approved documents: lawful basis, international transfers and the transfer mechanism. Today the only draft says Signet is based and hosted in the United States and names no UK position.
Not yet settled: Privacy contact
A Signet privacy contact exists and is monitored. Today the only contact is a Telo support inbox.
Not yet settled: Retention and deletion
A governing retention and deletion policy is ruled and in force (TEL-1186): standard retention, account closure, deletion requests, raw provider output, backups, legal holds and timing. Today none is set, and there is no self-serve export or deletion.