Data Protection

Inquire
Data Protection
Inquire

1. Purpose and Core Principles

Maven International processes personal data and client content as part of delivering interpretation, translation, and related language services. This policy sets out the core principles we apply to data protection across our staff, freelance linguists, suppliers, and clients to ensure lawful, transparent, and secure data handling.

2. Scope

This policy applies to all personal data and client content handled in the standard course of our operations. This includes project files, source and target content, specialized terminology, reference materials, contractor onboarding and billing information, and the personal data of internal staff, freelance linguists, and client touchpoints.

3. Lawful Handling

Personal data is processed exclusively for legitimate, clearly defined business purposes—primarily service delivery, supplier contracting, regulatory record-keeping, and lawful communication with clients and relevant authorities. We do not process personal data outside these explicit purposes without a verified lawful basis.

4. Data Minimization and Retention

We acquire and retain only the specific personal data strictly necessary to fulfill the intended purpose. Information that is not required is never requested. Any information held beyond its useful life or contractual mandate is securely and permanently deleted in line with our standard retention rules and applicable regional laws.

5. Access Control and Segregation

Client assets are strictly segregated by project to prevent cross-contamination. Access is entirely role-based and granted on a strict need-to-know basis. Project managers, linguists, and reviewers are permitted to see only the specific materials required for their current assignment, and all access is revoked immediately when the engagement ends.

6. Privacy by Process

Privacy and data protection are built directly into our operational workflows. This includes secure handovers, controlled access environments, restricted asset downloading, structured deletion protocols, and clear ownership of any client content temporarily held for quality assurance or audit reasons. The secure platform we utilize for client-side document exchange is ISO-certified for information security, as referenced in our Code of Ethics.

7. Data Subject Rights

Where applicable data protection law grants individuals the right to access, correct, restrict, or delete their personal data, requests can be submitted directly through our standard contact channels. All such requests are verified and handled within the strict timelines required by applicable law.

8. Breach Reporting

Any suspected breaches, unauthorized access, or security incidents involving personal data must be reported immediately through our internal escalation channels. Affected data subjects, clients, and relevant supervisory authorities will be notified promptly in accordance with applicable legal and contractual obligations.

9. Governance and Review

This policy is owned by the Director, with day-to-day operational oversight managed by Operations. It is reviewed annually to ensure alignment with evolving global privacy regulations. Related frameworks include our Code of Ethics, Supplier Code of Conduct, Privacy & Security Policy, and general compliance statements.

10. Information for Institutional Buyers

Additional technical documentation, formal data-processing terms, and specific due-diligence responses are available to institutional buyers and compliance teams upon request.

Get In Touch

Inquire