Title: Data Privacy and Security Policy Author: Kriko Published: Jul 5, 2026 Last modified: Aug 13, 2026 --- 1. [Home](https://kriko.io/) / 2. [Company Policies](https://kriko.io/company-policies) / 3. [Business Ethics and Compliance Policies](https://kriko.io/company-policies/business-ethics-and-compliance-policies)/ 4. Data Privacy and Security Policy # Company Policies The principles that guide every team at Kriko. From how we hire and protect data to how we uphold quality and sustainability. ## Data Privacy and Security Policy ## Data Privacy and Security ### a. Data Privacy Principles The Company takes all necessary measures to protect the confidentiality of customer, employee and business data. Data must be protected against unauthorised access, disclosure, alteration or misuse. ### b. Data Classification The Company classifies data according to its level of confidentiality and applies the appropriate security controls. Sensitive, personal and commercially confidential information is identified accurately and protected accordingly. ### c. Access Controls Users are granted access to data according to their roles and responsibilities. Access controls and authentication methods are implemented to prevent unauthorised access. ## Remote Working Security ### a. Secure Internet Connection Employees must use a secure internet connection when working remotely. The Company supports connection security through appropriate safeguards and encryption technologies. ### b. Strong Password Policy Employees are required to use strong and complex passwords. Passwords must be changed regularly, and login credentials must not be stored on shared computers. All employees are required to comply with the Company’s Password Creation and Use Policy. ### c. Application and Software Security The Company uses up-to-date software and applications to address security vulnerabilities. Remote employees must install security updates regularly and ensure that firewall software remains enabled. ## Data Transmission and Storage ### a. Secure Data Transmission The Company uses secure communication channels for the transmission and sharing of data. Sensitive or encrypted data must be transmitted using secure methods. ### b. Data Storage and Backup Data is stored on secure servers, and regular backups are performed. Secure backup and recovery procedures are implemented to prevent data loss. Data relating to projects whose contracts have been terminated is deleted after the retention period specified in the relevant agreement has expired. ## Training and Awareness ### a. Awareness Training All employees receive regular training on data privacy and security. Employees are provided with guidance on data security policies and recognised best practices. ### b. Breach Reporting and Investigation Employees are provided with a secure mechanism for reporting suspected data breaches. The “Speak Up” platform is used for such reports. Reported breaches are investigated confidentially, and the necessary corrective and preventive measures are implemented. ## Communication Policies * [Internal Communication and Collaboration Policy](https://kriko.io/company-policies/communication-policies/internal-communication-and-collaboration-policy) * [Internal Communication Channels and Meeting Policy](https://kriko.io/company-policies/communication-policies/internal-communication-channels-and-meeting-policy) * [Social Media Policy](https://kriko.io/company-policies/communication-policies/social-media-policy) ## Crisis and Incident Management Policies * [Crisis Communication and Reputation Management Policy](https://kriko.io/company-policies/crisis-and-incident-management-policies/crisis-communication-and-reputation-management-policy) * [Emergency Planning and Response Policy](https://kriko.io/company-policies/crisis-and-incident-management-policies/emergency-planning-and-response-policy) ## Disciplinary Policies * [Disciplinary Policy](https://kriko.io/company-policies/disciplinary-policies/disciplinary-policy) ## Human Resources Policies * [Diversity, Equity and Inclusion Policy](https://kriko.io/company-policies/human-resources-policies/recruitment-policy) * [Employee Training and Development Policy](https://kriko.io/company-policies/human-resources-policies/termination-policy) * [Anti-Discrimination and Diversity Policy](https://kriko.io/company-policies/human-resources-policies/anti-discrimination-and-diversity-policy) * [Occupational Health and Safety Policy](https://kriko.io/company-policies/human-resources-policies/remote-hybrid-work) * [Recruitment and Termination Policy](https://kriko.io/company-policies/human-resources-policies/recruitment-and-termination-policy) * [Working Hours, Leave and Absence Policy](https://kriko.io/company-policies/human-resources-policies/working-hours-leave-and-absence-policy) ## Business Ethics and Compliance Policies * [Password Creation and Use Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/data-protection-policy) * [Transparency and Reporting Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/acceptable-use-policy) * [Conflict of Interest and Anti-Bribery Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/conflict-of-interest-and-anti-bribery-policy) * [Data Privacy and Security Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/data-privacy-and-security-policy) * [Ethical Conduct and Integrity Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/ethical-conduct-and-integrity-policy) * [Legal and Regulatory Compliance Policy](https://kriko.io/company-policies/business-ethics-and-compliance-policies/incident-response) ## Customer Relations Policies * [Customer Data Privacy and Security Policy](https://kriko.io/company-policies/quality-compliance/quality-management) * [Complaint Management and Feedback Policy](https://kriko.io/company-policies/quality-compliance/anti-bribery-corruption) * [Customer Satisfaction Policy](https://kriko.io/company-policies/quality-compliance/code-of-conduct) ## Information Technology and Data Management Policies * [Ransomware, Phishing Attacks, Email and Internet Use Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/environmental-policy) * [Vulnerability Disclosure Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/vulnerability-disclosure-policy) * [Software Licensing and Usage Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/social-responsibility) * [Data Backup and Recovery Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/supplier-code-of-conduct) * [Data Security and Protection Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/data-security-and-protection-policy) * [Information Technology Use and Access Policy](https://kriko.io/company-policies/information-technology-and-data-management-policies/information-technology-use-and-access-policy) ## Track the digital heartbeat with Kriko Subscribe to receive curated insights, news, and ideas shaping the digital landscape. By checking this box, you acknowledge and accept our [privacy policy](https://kriko.io/privacy-policy).