​​​​

1. Purpose

This policy establishes how 1Async Solutions  collects, uses, stores, and protects personal and confidential information in the course of business operations. It ensures compliance with applicable privacy laws and protects the rights of employees, customers, and partners.

 

2. Scope

This policy applies to:

• All employees, contractors, and temporary staff

• All company systems, devices, and networks

• All forms of data, including digital, paper, and verbal information

​

3. Types of Information

• Personal Data

• Employee records (HR files, payroll, benefits)

• Customer and client contact information

• Vendor and partner details

• Confidential Business Information

• Financial data

• Strategic plansInternal communicationsIntellectual property

​

4. Data Collection Principles

• Collect only data necessary for legitimate business purposes

• Obtain information lawfully and transparently

• Limit access to authorized personnel only

​

5. Use of Information

• Information may only be used for:

• Business operations

• Employment administrationLegal and regulatory compliance

• Customer and vendor relationship management

• Unauthorized use of company or personal data is strictly prohibited.

 

6. Data Access and Control

• Access is granted based on job role (“least privilege” principle

• Employees must not access data unrelated to their duties

• All access may be monitored and audited

​

7. Data Security 

The company will:​

• Implement physical, technical, and administrative safeguards

• Require strong passwords and secure authentication

• Use encryption where appropriateMaintain secure storage systems

• Employees must:Protect login credentials

• Lock devices when unattendedReport security incidents immediately

 

8. Data Sharing and Disclosure

Information may only be shared:

• With authorized internal personnel

• With third parties under approved agreements

• When required by law or legal process

Sharing confidential data without authorization is a violation of this policy.

​

9. Data Retention and Disposal

• Data will be retained only as long as necessary

• Secure disposal methods (shredding, deletion, wiping) must be used

• Retention schedules will follow legal and regulatory requirements

​

10. Employee Responsibilities

All personnel must:

• Follow this policy at all times

• Complete required privacy and security training

• Report suspected breaches or misuse immediately

Failure to comply may result in disciplinary action, including termination.

​

11. Incident Response

Any suspected data breach must be reported immediately.

The company will investigate, mitigate risks, and comply with notification laws as required.

 

12. Policy Enforcement

Violations of this policy may result in:

• Disciplinary action

• Legal consequences

• Termination of employment or contracts

​

13. Policy Updates

This policy may be updated periodically. Employees will be notified of significant changes.