We generally keep the data collected inside the European Economic Area (EEA). If the data is to be transferred outside of the EEA, we transfer the minimum amount of data necessary, and anonymise it where possible.
With those parties we have agreements in place which include standard data protection clauses to ensure that appropriate safeguards are in place to protect the personal data in accordance with our Privacy Policy and the European levels of data protection.