Data Handling & Commitments

Effective date: 1 March, 2026

Last updated: 27 March, 2026

Purpose of this page

This page summarises how we handle data and the commitments we aim to uphold when engaging with investors, enterprise partners, and candidates. It is a high-level overview. Contractual terms, including NDAs and data processing agreements, may apply depending on the engagement.

Our data principles

We aim to follow these principles:

• Data minimisation. We collect only what we need for the stated purpose.
• Purpose limitation. We use data only for the purpose it was collected for, unless we have a lawful basis to do otherwise.
• Access control. Access is limited to authorised personnel based on role and need.
• Transparency. We document what we collect and how it is used.
• Security by design. We apply reasonable safeguards appropriate to the risk.

What data we collect through this website

Typical data we collect includes:

• Contact details and enquiry information submitted via forms.
• Organisation and role information to route your enquiry correctly.
• Usage and analytics data for website performance and security monitoring.
• Job application information if you apply through the website.

How we protect data

Depending on our systems and providers, safeguards may include:

• Role-based access controls and least-privilege access where feasible.
• Encryption in transit for website traffic (HTTPS).
• Security monitoring and logging that are appropriate to our environment.
• Vendor due diligence and contractual protections with key service providers.

Specific controls vary by system. If you require detailed security information for due diligence, request it at info@morgansholding.com.

Processors and subprocessors

We use third-party service providers to operate the website and communications. Examples may include:

• [PROCESSORS_LIST]

Some details may be provided under NDA for enterprise diligence.

Data retention

We retain data only as long as needed for the purpose it was collected for, and as required by law. 

Incident response

We maintain an approach to identifying, responding to, and learning from security incidents. If an incident affects enterprise partner data and notification is required, we will follow applicable legal and contractual obligations. 

Enterprise agreements

For enterprise engagements, we may use NDAs and, where applicable, data processing agreements to define responsibilities, security requirements, and data handling terms. To discuss enterprise diligence requirements, contact info@morgansholding.com. 

Contact

Data enquiries: info@morgansholding.com
Privacy enquiries: info@morgansholding.com
Registered office: Morgan’s Holding Global Ltd, 28 City Road, London EC1V 2NX, UK