Data Protection Policy
1. Introduction
Prestige Bluestar Holdings Ltd is committed to protecting the personal data of our employees, clients, and partners. This Data Protection Policy outlines our commitment to data privacy and compliance with applicable data protection laws and regulations. This policy applies to all employees, directors, officers, and subsidiaries of Prestige Bluestar Holdings Ltd.
2. Policy Statement
We are dedicated to ensuring that all personal data is collected, stored, processed, and disposed of in accordance with applicable data protection laws and regulations. We respect the privacy of individuals and are committed to safeguarding their personal information.
3. Definitions
- Personal Data: Any information relating to an identified or identifiable individual, such as names, contact details, identification numbers, and other personal identifiers.
- Data Processing: Any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
4. Data Collection and Use
- Purpose Limitation: Personal data will be collected and used only for specific, legitimate purposes related to our business operations, such as providing services, fulfilling contracts, and complying with legal obligations.
- Data Minimization: We will collect only the personal data necessary to achieve the specified purposes and will avoid collecting excessive or irrelevant information.
5. Data Security
- Protection Measures: We will implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, or alteration. This includes using encryption, secure storage solutions, and access controls.
- Data Access: Access to personal data will be restricted to authorized personnel who require it for their job functions. All employees will be trained on data protection and security practices.
6. Data Sharing and Disclosure
- Third-Party Sharing: Personal data will not be shared with third parties without appropriate safeguards in place, such as data protection agreements. Third parties must comply with data protection laws and maintain data security.
- Legal Requirements: We may disclose personal data if required by law or in response to valid legal requests, such as subpoenas or regulatory inquiries.
7. Data Subject Rights
- Access: Individuals have the right to access their personal data and obtain information about how it is being processed.
- Correction: Individuals have the right to request correction or updates to their personal data if it is inaccurate or incomplete.
- Deletion: Individuals may request the deletion of their personal data under certain conditions, such as when it is no longer necessary for the purposes for which it was collected.
- Objection: Individuals have the right to object to the processing of their personal data under specific circumstances.
8. Data Retention
- Retention Period: Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by legal obligations. We will establish data retention schedules and ensure proper disposal of data when it is no longer needed.
9. Data Breach Notification
- Incident Response: In the event of a data breach, we will follow established procedures to assess the impact, contain the breach, and notify affected individuals and relevant authorities as required by law.
- Reporting: Employees must report any suspected data breaches or security incidents to management immediately.
10. Policy Review and Updates
- Review: This Data Protection Policy will be reviewed periodically and updated as necessary to reflect changes in regulations, industry standards, and company practices.
- Communication: Employees will be informed of any updates to this Policy and are required to adhere to the latest version.
11. Acknowledgment
All employees, directors, officers, and representatives are required to acknowledge their understanding and commitment to this Data Protection Policy as part of their engagement with Prestige Bluestar Holdings Ltd.
