Q: What controls do you have in place to enable you to identify and delete data on receipt of a request to do so?

A: We have controls in place to identify and delete data upon request. Our Data Protection Policy outlines the procedures and technical controls in support of data protection. Stored sensitive data that is no longer required is properly deleted in accordance with our business objectives, applicable laws and regulations, and relevant third-party agreements. The deletion process is designed to render the data unrecoverable, and is classified as a permanent deletion. A record of such deletion is kept. We capture requests for deletion of personal information and information related to the requests is appropriately deleted.