We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or misuse. Access to personal information is limited to authorized personnel with legitimate responsibilities.