Data processing and security

This page explains how Sentosa handles client data and access to client systems.

1. Registration

Sentosa Limited is registered with the Information Commissioner’s Office (registration number ZC052443).

2. What data we handle

To run SEO, digital PR and AI search work, we use data from tools such as Google Search Console, Google Analytics and Ahrefs, along with information clients share with us, such as reports, targets and contact details.

3. Access to your systems

We ask for the lowest level of access a task needs, using user accounts you grant to us rather than shared passwords. You can remove our access at any time.

4. Where data is stored

We store client files and reports in Google Drive.

5. Who can see it

Only team members working on your account can access your data.

6. Keeping and deleting data

We keep project data after a contract ends for our records and for any future work together. You can ask us to delete your data at any time, and we will do so unless we are required by law to keep it.

7. If something goes wrong

If we become aware of a data breach affecting your data, we will tell you without undue delay.

8. Personal data

Our privacy policy explains how we handle personal data under UK data protection law.