We apply minimum collection and role-based access for service operations.

No public page should expose customer data. Protected data is available only after authentication.

Template content. Full policy text pending legal sign-off.