Privacy Policy

1. Purpose

​

This policy outlines our commitment to protecting the confidentiality, integrity, and security of all client information entrusted to us. We recognize that clients rely on us to safeguard their data and we take this responsibility with the highest seriousness.

​

2. Scope

​

This policy applies to all employees, contractors, partners, and third-party vendors who have access to client data in any form, whether digital, written, or verbal.

​

3. Principles of Data Confidentiality Lawful Use:

 

Client data will only be collected, processed, and stored for legitimate business purposes and in accordance with applicable laws and regulations. Confidentiality: All client information is considered strictly confidential and may not be disclosed to unauthorized individuals or organizations. Access Control: Access to client data is limited to personnel who require it to perform their job duties. Data Minimization: Only the minimum necessary information will be collected and stored. Integrity & Accuracy: We strive to ensure client information is accurate, complete, and up to date.

 

 

4. Security Measures

 

We employ administrative, technical, and physical safeguards to protect client data, including but not limited to: Encryption of data during transmission and storage.Regular system monitoring and security audits. Role-based access control and authentication mechanisms. Secure disposal of records no longer required.

​

5. Responsibilities

 

Employees must adhere to confidentiality agreements and undergo regular training on data protection practices. Management must enforce compliance with this policy and promptly address any breaches. Third-party service providers must comply with our data protection standards through binding agreements.

​

6. Breach Response

 

In the event of a suspected or actual data breach: The incident must be reported immediately to the Data Protection Officer.An investigation will be conducted to assess the scope and impact. Clients will be notified promptly if their data is affected, in accordance with regulatory requirements.

​

7. Client RightsClients have the right to:

​

Access the personal data we hold about them. Request corrections to inaccurate or incomplete data. Request deletion of their data, subject to legal and contractual obligations.

​

8. Review and Updates.

 

This policy will be reviewed at least annually and updated as necessary to reflect legal, technological, or organizational changes.