This policy sets out how BGadi Business Solutions keeps personal data secure and available, in support of our Privacy Policy.
Data is encrypted in transit using TLS. Sensitive data at rest and all passwords are protected using strong, industry-standard methods. See the Data Encryption Policy.
Data is backed up on a regular schedule to secure storage, so it can be restored after loss or corruption. See the Backup & Disaster Recovery Policy.
Access to personal data is limited to authorised staff on a need-to-know basis, protected by individual accounts and, where available, two-factor authentication. Access is logged.
If a breach affecting personal data occurs, we contain it, assess the impact, notify affected users and the authorities where the law requires, and take steps to prevent recurrence. See the Incident Response Policy.
We keep personal data only as long as necessary and delete or anonymise it when it is no longer needed, in line with the Privacy Policy.