Privacy is treated as an operating principle, not an afterthought.

General approach

• Collect only what is proportionate to the purpose.
• Prefer narrower retention over open-ended accumulation.
• Restrict access according to role, necessity, and context.
• Use third-party services deliberately rather than casually.
• Distinguish clearly between company-level information and product-level processing.

Practical position

Different projects within the Aspen Meridian group may operate under their own privacy notices, service-specific terms, or technical controls. Where that is the case, the relevant product or service documentation should be treated as the more specific statement for that environment.