While the company has a publicly available privacy statement in relation to the collection, sharing and access to personal data, this only includes customer's data and it is not clear that this covers, at a minimum, the data of customers and employees.