The Data Protection Policy explains how you should hold and process information; rights of a data subject; your obligations when obtaining, handling, processing or storing personal data.