Client data protection statement