SQS - Supplier Frequently Asked Questions

SYSTEM
Contents
2.6 Information & Data
What is Achilles Data Privacy Policy?
Achilles places great importance on managing its Supplier Management Services (SMS), such as Shell SQS, in a
responsible and professional manner, with due regard for data quality, confidentiality, integrity, security, privacy and the
rights of individuals and customers, including the treatment of Personal Data as well as customer confidential data.
Achilles’ SMS services typically collect only a small amount of Personal Data, which is usually limited to the contents of a
business card (name, job title and work contact details), and which is entered by customers themselves in responses to the
SMS questionnaires or other data entry screens. Achilles may collect similar levels of Personal Data within its customer
relationship management systems, or resulting from Audits of customers. Achilles does not intentionally collect any
“Sensitive Personal Data” on any individual data subjects, and does not wish to collect such data. Further to this however,
customers often regard the data provided to be commercially sensitive, and although much of the information could
perhaps be collected from other publicly accessible sources without significant cost, Achilles takes seriously its duty to
keep this data secure and confidential.
To meet its contractual commitments around these requirements, all Achilles staff (and others acting on Achilles’ behalf,
such as consultants or contracted auditors) who process or use such Customer information, must comply with Achilles’
internal Data Protection Policy.
(The policy details are continued on the next page.)
31