Last updated: 28 April 2026
1. Introduction
EEW Design Limited (“EEW Design”, “we”, “us”) recognises that clients rely on us to deliver creative, digital, video, print-management and related services securely, reliably and to agreed timescales.
This Business Continuity and Disaster Recovery Policy explains how we prepare for and respond to events that could disrupt our services. As a creative studio working with corporate, financial-services and public-sector clients, we recognise that continuity, confidentiality and deadlines are important.
2. Purpose and scope
This policy sets out the measures we use to protect client work, data and systems, and to recover from incidents affecting our operations.
It applies to all EEW Design directors, employees, contractors, freelancers and anyone handling client information or systems on our behalf.
3. Objectives
Our business continuity and disaster recovery objectives are to:
maintain critical creative and production services wherever reasonably possible;
protect client data, project files and intellectual property from loss, corruption or unauthorised access;
minimise avoidable downtime and disruption;
provide clear points of contact if an incident affects a client project; and
review and improve our continuity arrangements as our studio, systems and client requirements develop.
4. Roles and responsibilities
The Director is responsible for implementing and maintaining this policy, coordinating incident response and keeping clients informed where appropriate.
Everyone working with or for EEW Design must:
use approved tools and storage locations;
follow data-protection and information-security requirements;
report any incident that may affect service delivery, client information or system availability; and
cooperate with recovery steps where needed.
Third-party suppliers are expected to maintain appropriate continuity and disaster recovery controls for the services they provide to EEW Design.
5. Risk assessment
We periodically review risks that could affect our operations, including:
power cuts, connectivity issues or equipment failure;
loss, theft or damage of devices used to access client work;
cyber incidents, malware, unauthorised access attempts or account compromise;
unavailability of key third-party services, including cloud storage, communications, project-management and web platforms;
illness or unexpected unavailability of key personnel; and
delays caused by third-party production, print, hosting or software providers.
Where risks are identified, we take proportionate steps to reduce the likelihood and impact of disruption.
6. Preventative and continuity measures
To support day-to-day continuity, we:
use reputable cloud-based tools for file storage, collaboration and communication;
protect devices with strong authentication, automatic locking and appropriate access controls;
keep key project files, templates and brand assets in access-controlled locations rather than on a single local device;
maintain alternative methods of communication where appropriate;
document key project information so another authorised person can assist where needed; and
use third-party suppliers with appropriate service, security and continuity arrangements where available.
7. Backup and recovery
To protect client work and operational data, we:
store active project files in secure cloud environments with redundancy and version history where appropriate;
maintain backup arrangements for key storage locations;
keep backup copies of final deliverables for a reasonable period after project completion, unless agreed otherwise;
use version-control or file-history tools where appropriate; and
periodically check that key files can be accessed and restored.
In the event of file loss or corruption, we will seek to restore from the most recent viable backup and notify affected clients where relevant.
8. Incident response and communication
If an incident occurs that could affect our ability to deliver work or safeguard client data, we will:
assess the incident and contain the immediate risk;
prioritise protection of client data and time-critical deliverables;
notify affected clients where the incident is likely to affect deadlines, deliverables or data;
agree practical workarounds or revised timelines where needed; and
record the incident, cause and actions taken so we can improve our controls.
Where personal data is involved, we will also follow our Privacy Policy and data-breach procedures.
9. Remote working and site access disruption
EEW Design operates as a remote-capable studio. If our normal working location is unavailable, we will:
continue working from alternative secure locations where possible;
use cloud-based tools to access project files and communicate with clients and suppliers;
avoid using insecure public networks for confidential client work unless appropriate protection is in place; and
inform clients if there is a material impact on delivery timescales.
10. Third-party services and suppliers
Our workflows rely on third-party providers, including cloud storage, software, communications tools, video platforms, web platforms, print suppliers and professional advisers.
When selecting or reviewing suppliers, we consider, where proportionate:
their information-security and availability commitments;
their own continuity and disaster recovery arrangements;
whether we can export or recover our data if the service becomes unavailable; and
whether an alternative provider or temporary workaround is available.
Where a third-party outage affects a project, we will communicate promptly with affected clients and set out the practical options.
11. Testing, review and improvement
At least periodically, and after any significant incident, we review:
key operational risks;
backup and recovery arrangements;
contact details, tools and procedures;
lessons learned from any disruption; and
whether any improvements are needed.
12. Contact
Questions about this policy, or requests for more detail on how it applies to a specific project, can be directed to:
Emile Wendling
Director, EEW Design Limited
policy@eew-design.com
