Maven International processes personal data and client content as part of delivering interpretation, translation, and related language services. This policy sets out the core principles we apply to data protection across our staff, freelance linguists, suppliers, and clients to ensure lawful, transparent, and secure data handling.
This policy applies to all personal data and client content handled in the standard course of our operations. This includes project files, source and target content, specialized terminology, reference materials, contractor onboarding and billing information, and the personal data of internal staff, freelance linguists, and client touchpoints.
Personal data is processed exclusively for legitimate, clearly defined business purposes—primarily service delivery, supplier contracting, regulatory record-keeping, and lawful communication with clients and relevant authorities. We do not process personal data outside these explicit purposes without a verified lawful basis.
We acquire and retain only the specific personal data strictly necessary to fulfill the intended purpose. Information that is not required is never requested. Any information held beyond its useful life or contractual mandate is securely and permanently deleted in line with our standard retention rules and applicable regional laws.
Client assets are strictly segregated by project to prevent cross-contamination. Access is entirely role-based and granted on a strict need-to-know basis. Project managers, linguists, and reviewers are permitted to see only the specific materials required for their current assignment, and all access is revoked immediately when the engagement ends.
Privacy and data protection are built directly into our operational workflows. This includes secure handovers, controlled access environments, restricted asset downloading, structured deletion protocols, and clear ownership of any client content temporarily held for quality assurance or audit reasons. The secure platform we utilize for client-side document exchange is ISO-certified for information security, as referenced in our Code of Ethics.
Where applicable data protection law grants individuals the right to access, correct, restrict, or delete their personal data, requests can be submitted directly through our standard contact channels. All such requests are verified and handled within the strict timelines required by applicable law.
Any suspected breaches, unauthorized access, or security incidents involving personal data must be reported immediately through our internal escalation channels. Affected data subjects, clients, and relevant supervisory authorities will be notified promptly in accordance with applicable legal and contractual obligations.
This policy is owned by the Director, with day-to-day operational oversight managed by Operations. It is reviewed annually to ensure alignment with evolving global privacy regulations. Related frameworks include our Code of Ethics, Supplier Code of Conduct, Privacy & Security Policy, and general compliance statements.
Additional technical documentation, formal data-processing terms, and specific due-diligence responses are available to institutional buyers and compliance teams upon request.