We maintain technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. </p> <p>Our current measures include industry-standard encryption for data in transit (TLS), strong encryption for data at rest on our servers and backups, secure and professionally managed data centres with physical security controls, security updates, patch management, and infrastructure hardening, rate limiting and protections against abuse and attacks, access controls so that only authorised staff can access user data on a need-to-know basis and for limited purposes, regular encrypted backups for disaster recovery, and audit logging of access to user data.