Data protection legislation controls how your personal information is used. The main principles are:

• we only collect information that we need
• we will keep your personal information secure
• we do not keep your information longer than necessary
• we tell you why we need your information and what we will do with it
• the information we collect is accurate, and where necessary, kept up to date
• we do not use your information for any purpose other than what we tell you it is collected for, unless required to do so by law