IDCV v Curve OS Group: privilege not waived by references to documents held by director