Commitment to Data Privacy
a. Confidentiality of Customer Data
The Company takes all necessary measures to protect the privacy and confidentiality of customer data.
Customer data may only be accessed and processed by authorised personnel.
b. Data Protection and Security Standards
The Company implements procedures aligned with recognised industry standards to protect customer data and maintain its security.
Appropriate safeguards are applied to prevent unauthorised access, data breaches and data loss.
Data Collection and Use
a. Collection of Customer Data
The Company collects and uses customer data only for specified and legitimate purposes.
Any required consent is obtained from customers, and the data collection process is managed transparently.
b. Use and Disclosure of Data
The Company uses customer data solely for the purposes for which it was collected.
Customer data is not shared with or sold to third parties without the customer’s request or authorisation.
Data Security
a. Data Encryption and Secure Storage
The Company protects customer data using appropriate encryption technologies and stores it on secure servers.
Physical and digital security measures are implemented to safeguard customer data.
b. Access Controls
The Company ensures that customer data is accessible only to authorised personnel.
Access controls and authentication procedures are implemented to prevent unauthorised access.
Data Breaches and Monitoring
a. Data Breach Notification
The Company takes appropriate measures to promptly identify breaches involving customer data and notify the relevant parties.
Affected customers are informed of the breach where appropriate, and the necessary containment, corrective and preventive measures are taken.
b. Security Monitoring and Auditing
The Company regularly monitors its systems, identifies security vulnerabilities and takes appropriate corrective action.
Data security practices and controls are continuously assessed through internal and external audits.
Employee Training and Awareness
a. Data Privacy Training
The Company provides employees with regular training on data privacy and security.
Employees receive the necessary training and guidance to protect the confidentiality of customer data.
b. Awareness and Compliance
The Company encourages employees to comply with its data privacy policies and exercise due care when handling customer data.
Appropriate disciplinary action may be taken in the event of a violation.
