Privacy

Privacy by Design

OneAdvanced privacy by design centers around the following seven principles:

1. Proactive, Not Reactive; Preventative, Not Remedial
   Prevention is always better than a cure. Privacy by design focuses on anticipating potential privacy issues and addressing them proactively, rather than reacting to problems after they occur."
2. Privacy as Default
   Always operating under the assumption that users prefer not to have their data collected or used. By default, we process personal data only when it is essential to provide a service explicitly requested by the user.
3. Embedding Privacy into Design
   Privacy is integral to every system or product, embedded from the start rather than added as an afterthought. It's a central focus throughout the entire system development lifecycle, from initial planning to ongoing maintenance.
4. Full Functionality — Positive-Sum, Not Zero-Sum
   We treat privacy-by-design philosophy as a win-win opportunity and we strive to leverage privacy as a key feature of our final system or product, rather than treating it as a compromise between privacy and usability.
5. End-to-End Security — Full Lifecycle Protection
   Security and privacy are closely interconnected. The principle of 'end-to-end security' ensures that personal data remains protected throughout its entire lifecycle—from collection to deletion and every step in between
6. Visibility and Transparency — Keep It Open
   We are transparent and upfront about our data processing practices, as openness fosters trust. 
7. Respect User Privacy — Keep It User-Centric
   Safeguarding the user's privacy and rights throughout every step is paramount for OneAdvanced. 

We are dedicated to embedding privacy principles and controls throughout every stage of a product or system's lifecycle.

In the context of global data protection legislation, we are proactively integrating 'privacy by design' into the core of our processes in order to reduce risks, enhance customer trust, and foster sustainable, long-term growth.

Privacy by Default 

In accordance with Article 25(2) of the UK GDPR, we are committed to implement suitable technical and organizational measures to ensure that only the personal data necessary for a specific purpose is processed. Please check our Cyber Security Aligned Technical and Organisational Measures.

OneAdvanced Data Protection Mission Statement 

We are committed to protecting the privacy and security of all personal data entrusted to us. Our mission is to uphold the highest standards of data protection by ensuring that personal information is handled with care, integrity, and transparency throughout its lifecycle. We strive to comply with all relevant data protection laws and regulations, safeguard the rights of individuals, and maintain the trust of our customers, employees, and partners. Through proactive measures, continuous monitoring, and ongoing education, we aim to create a secure environment where data is responsibly managed and protected against misuse, unauthorized access, and loss. 

Global Data Privacy 

OneAdvanced acknowledges privacy as a fundamental human right and champions the free flow of data. 

We are dedicated to complying with applicable global privacy standards. For this purpose, we ensure that our products, business practices, and customer agreements align with international data privacy requirements.

We also actively monitor evolving regulations and guidance issued by supervisory authorities. Additionally, we make contractual commitments to comply with all relevant laws that apply to OneAdvanced as a data processor, including data privacy legislation.

Sub-processors

OneAdvanced uses several sub-processors in providing its services.

Please see the Sub Processorts List which includes a list of the Third-Party Companies and OneAdvanced Affiliates used as Sub-Processors across all OneAdvanced products. Please subscribe here to receive an email whenever we add a new Sub-Processor.

Customer and Supplier Privacy Notice

Our main objective is to foster trust by demonstrating our commitment to protecting our customers' personal data and respecting privacy. Please check our Customer and Supplier Privacy Notice.

Data Return and Deletion

In the event that the customer requests return of their personal data, all customer personal data will be deleted within ninety (90) days of the confirmation of receipt of data extract by the customer, unless otherwise agreed in writing between the parties or to the extent it is required to be retained or deleted under applicable law. Please check Data and Return Deletion.

Employee Privacy Training

OneAdvanced staff completes security awareness training, which includes data privacy education during onboarding, along with annual refresher courses.

Contact

For any questions regarding our data protection policies, please contact our DPO at dataprotection@oneadvanced.com