Our approach to data protection and privacy