https://www.modernslaverylaws.com/assets/privacy-BhkzeQKD.js

1import{r as t,j as e}from"./QueryClientProvider-C1unof7P.js";import{M as s,T as r}from"./logo-B7yVymwb.js";import{L as a}from"./index-BoetV10O.js";import{s as i}from"./seo-hLTzzcf6.js";import{C as o}from"./chevron-left-C5FwQG2p.js";import"./button-SBb9uHiR.js";import"./x-DiJda-Uu.js";import"./share-DEITDgqJ.js";function u(){return t.useEffect(()=>{i({title:"Privacy & Data Protection | Modern Slavery Laws",description:"How Modern Slavery Laws collects, uses and protects data across the compliance platform.",path:"/legal/privacy"})},[]),e.jsxs("div",{className:"min-h-screen bg-background text-foreground font-sans",children:[e.jsx("header",{className:"border-b border-border bg-background sticky top-0 z-50",children:e.jsxs("div",{className:"container mx-auto px-4 h-16 flex items-center justify-between max-w-5xl",children:[e.jsxs(a,{href:"/",className:"flex items-center gap-2 text-sm font-medium text-muted-foreground hover:text-primary transition-colors",children:[e.jsx(o,{className:"w-4 h-4"})," Back to Home"]}),e.jsx(s,{className:"scale-75 origin-right"}),e.jsx(r,{})]})}),e.jsxs("main",{className:"container mx-auto px-4 py-16 max-w-5xl flex flex-col md:flex-row gap-12 items-start",children:[e.jsxs("aside",{className:"w-full md:w-64 shrink-0 md:sticky top-32 space-y-4",children:[e.jsx("div",{className:"text-sm font-display font-bold uppercase tracking-wider text-muted-foreground mb-4",children:"Contents"}),e.jsxs("nav",{className:"flex flex-col gap-3 text-sm font-medium text-muted-foreground",children:[e.jsx("a",{href:"#data-residency",className:"hover:text-primary transition-colors",children:"1. GDPR & Data Residency"}),e.jsx("a",{href:"#supplier-confidentiality",className:"hover:text-primary transition-colors",children:"2. Supplier Confidentiality"}),e.jsx("a",{href:"#whistleblower",className:"hover:text-primary transition-colors",children:"3. Whistleblower Protection"}),e.jsx("a",{href:"#data-categories",className:"hover:text-primary transition-colors",children:"4. Data Categories"}),e.jsx("a",{href:"#retention",className:"hover:text-primary transition-colors",children:"5. Retention & Deletion"}),e.jsx("a",{href:"#rights",className:"hover:text-primary transition-colors",children:"6. Data Subject Rights"})]})]}),e.jsxs("article",{className:"prose prose-slate dark:prose-invert max-w-none flex-1",children:[e.jsxs("div",{className:"mb-12",children:[e.jsx("h1",{className:"text-4xl font-display font-bold tracking-tight mb-4",children:"Data Privacy Framework"}),e.jsx("div",{className:"text-sm text-muted-foreground font-mono",children:"Last Updated: July 2026"})]}),e.jsxs("section",{id:"data-residency",className:"mb-12 scroll-mt-32",children:[e.jsx("h2",{className:"text-2xl font-display font-bold mb-4",children:"1. GDPR & Cross-Border Data Residency"}),e.jsx("p",{children:"MSL architected its infrastructure to ensure strict adherence to the General Data Protection Regulation (GDPR) and equivalent global privacy statutes. We maintain a regional data residency commitment:"}),e.jsx("p",{className:"font-medium bg-muted/50 p-4 border-l-4 border-msl-sky",children:"European worker and supplier data is processed and stored exclusively on EU-hosted instances (Frankfurt/Dublin). Data does not cross borders without explicit Standard Contractual Clauses (SCCs) governing the transfer."})]}),e.jsxs("section",{id:"supplier-confidentiality",className:"mb-12 scroll-mt-32",children:[e.jsx("h2",{className:"text-2xl font-display font-bold mb-4",children:"2. Supplier Data Confidentiality"}),e.jsx("p",{children:"We recognize that supply chain mapping requires suppliers to submit highly sensitive commercial data (e.g., sub-tier vendor lists, wage structures, recruitment agency contracts)."}),e.jsxs("p",{children:["MSL utilizes granular access controls. Clients are granted access to ",e.jsx("strong",{children:"risk outputs and compliance status indicators"})," only. The underlying proprietary commercial documents submitted by suppliers remain encrypted and are never shared directly with the buying enterprise unless the supplier grants explicit, separate consent during a formal audit process."]})]}),e.jsxs("section",{id:"whistleblower",className:"mb-12 scroll-mt-32",children:[e.jsx("h2",{className:"text-2xl font-display font-bold mb-4",children:"3. Worker Identity & Whistleblower Protection"}),e.jsx("p",{children:"The Worker Grievance Portal is designed as a secure, end-to-e

1nd encrypted channel."}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Absolute Anonymity:"})," If a worker selects the anonymous reporting option, MSL drops all PII, strips IP addresses, and scrubs metadata from uploaded evidence files before routing the grievance to the compliance team."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Anti-Retaliation Strictures:"})," MSL explicitly forbids the use of the platform to identify whistleblowers. Any client found attempting to de-anonymize worker reports will face immediate platform suspension and reporting to relevant regulatory bodies."]})]})]}),e.jsxs("section",{id:"data-categories",className:"mb-12 scroll-mt-32",children:[e.jsx("h2",{className:"text-2xl font-display font-bold mb-4",children:"4. Data Categories Collected"}),e.jsx("p",{children:"We process the following categories of data solely for the provision of the MSL Platform:"}),e.jsxs("ul",{children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Corporate Identifiers:"})," Entity names, addresses, registration numbers, sector codes."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Administrative PII:"})," Names, business emails, and roles of Client and Supplier compliance officers."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Grievance Records:"})," Case descriptions, locations, and (if opted-in) reporter contact details."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Telemetry:"})," System access logs, session data, and audit trails required for security monitoring."]})]})]}),e.jsxs("section",{id:"retention",className:"mb-12 scroll-mt-32",children:[e.jsx("h2",{className:"text-2xl font-display font-bold mb-4",children:"5. Retention Periods"}),e.jsxs("p",{children:["Compliance records (SAQs, framework reports, audit logs) are retained for a minimum of ",e.jsx("strong",{children:"seven (7) years"})," to satisfy statutory record-keeping obligations under modern slavery legislation."]}),e.jsx("p",{children:"Upon termination of a client contract, enterprise data is archived in a cold-storage state for the remainder of the statutory period, after which it is cryptographically destroyed."})]}),e.jsxs("section",{id:"rights",className:"mb-12 scroll-mt-32",children:[e.jsx("h2",{className:"text-2xl font-display font-bold mb-4",children:"6. Data Subject Rights"}),e.jsx("p",{children:"Individuals have the right to access, correct, restrict processing, or request deletion of their personal data (Right to be Forgotten). Because MSL acts as a Data Processor for the majority of platform data, subject access requests (DSARs) should be directed to the relevant employing entity (the Data Controller)."}),e.jsxs("p",{children:["If you require assistance or wish to contact MSL's Data Protection Officer, please email ",e.jsx("strong",{children:"[email protected]"}),"."]})]})]})]}),e.jsxs("footer",{className:"border-t border-border bg-muted/30 py-8 mt-12 text-center text-sm text-muted-foreground font-display",children:["© ",new Date().getFullYear()," Modern Slavery Laws. All rights reserved."]})]})}export{u as default};