Personal data is processed by Sage Advocacy based on the individual’s explicit consent. Where the individual is unable to give consent, personal data is processed by Sage Advocacy based on the vital interests of the individual. Sage Advocacy complies with the Data Protection Acts, 1988-2018 (including GDPR). All information provided is safeguarded securely, safely, and privately. Sound recordings of any meeting whether involving third parties or otherwise, without permission of all participants will be regarded as a data breach. The information may be retained for up to 10 years, and may be anonymised for systemic case research and statistical purposes. We do not share any service user information with third parties without explicit consent, unless we are required to do so by law or to protect the service user or another individual from serious harm. There are rights available to data subjects, including the right to withdraw consent. For further information see http://ec.europa.eu/justice/data-protection/reform/files/regulation_oj_en.pdf