Governance Pack

UK GDPR / DPA 2018

Governs how TalaStar Digital collects, processes, stores, and protects personal data. Covers lawful bases for processing, data subject rights (access, rectification, erasure, portability), data retention periods, international transfers, and the role of the UK Information Commissioner's Office as supervisory authority.

Consumer Rights Act 2015

Defines the contractual relationship between TalaStar Digital and its users. Covers service descriptions, user obligations, intellectual property rights, limitation of liability, dispute resolution, and governing law under England and Wales jurisdiction.

Sovereign Code & HEAL Principles

Establishes TalaStar's foundational ethical framework built on four pillars: Kindness, Expertise, Collaboration, and Aspiration. Includes the Sovereign Code for AI governance, HEAL principles for healthcare AI, and commitments to transparency, human dignity, and responsible innovation.

UK MSA 2015 Section 54 (Voluntary)

Voluntary statement under the UK Modern Slavery Act 2015. TalaStar is below the £36M threshold but publishes as an ethical commitment. Covers supply chain risk assessment across four categories, AI-specific human dignity considerations, and six forward commitments.

PECR 2003 / ePrivacy Directive

Details the types of cookies used on the TalaStar website, their purposes, retention periods, and user controls. Covers strictly necessary, functional, analytics, and preference cookies with clear consent mechanisms.

WCAG 2.1 AA (Voluntary)

Voluntary conformance statement aligned with the Web Content Accessibility Guidelines 2.1 at Level AA. Honestly discloses partial conformance at 84%, documents known limitations, and outlines an improvement roadmap with specific milestones.

ILO / UN Guiding Principles

Sets ethical expectations for all current and future suppliers across six principles: Human Rights & Labour, Health & Safety, Environmental Responsibility, Business Ethics, Data Protection & AI Ethics, and Community Impact. Includes 30 specific expectations and a four-step compliance process.

UK GDPR Article 17

Implements the right to erasure under UK GDPR. Describes the data deletion request process, verification procedures, scope of deletion, exemptions (legal obligations, public interest), response timeframes, and confirmation mechanisms.

Guardian Protocol / CDPA 1988

Protects TalaStar's intellectual property through the Guardian Protocol framework. Covers copyright ownership under the Copyright, Designs and Patents Act 1988, trademark protections, permitted uses, and enforcement mechanisms.

UK PIDA 1998

Safe reporting framework under the Public Interest Disclosure Act 1998. Defines five categories of reportable concerns, three reporting channels (including the independent charity Protect), four statutory protections for whistleblowers, and a four-step investigation process.

ACAS Code of Practice

Individual workplace complaints resolution procedure aligned with the ACAS Code of Practice on Disciplinary and Grievance Procedures. Covers five grievance categories, informal resolution options, a four-stage formal procedure, right to be accompanied, and external resources including ACAS and employment tribunals.

UK Bribery Act 2010

Zero-tolerance anti-bribery policy under the UK Bribery Act 2010. Covers all four statutory offences (Sections 1, 2, 6, and 7), core prohibitions on bribes, facilitation payments, political donations, and third-party intermediaries. Includes risk assessment framework and due diligence procedures.

ISO 27001 Aligned

ISO 27001-aligned information security framework covering data classification, access control, encryption standards, incident response, and business continuity. Proportionate to TalaStar's early-stage size with a roadmap for formal certification.

Voluntary Commitment

Voluntary environmental commitment covering digital carbon footprint, responsible technology operations, and sustainability principles. Honest about TalaStar's early-stage size while establishing measurable environmental targets for growth.

HSWA 1974 (Voluntary)

Voluntary health and safety policy under the Health and Safety at Work etc. Act 1974. Published before the five-employee statutory threshold. Covers DSE regulations, mental health, electrical safety, fire safety, first aid, risk assessment, and lone working provisions for a remote-first digital company.