GOVERNANCE & COMPLIANCE

Data Protection Policy

OCTET360 is committed to maintaining the confidentiality, integrity, and security of all personal data processed throughout our advisory and technology implementation engagements.

POLICY FRAMEWORK

Core Processing Principles

Our data governance framework enforces strict compliance standards to ensure all personal information is processed lawfully, transparently, and securely across every project.

Lawful & Transparent Processing

Purpose & Data Minimisation

Personal data is collected and processed only with legitimate legal bases, clear consent mechanisms, and transparent disclosure of processing purposes.

We limit data collection to what is strictly necessary for defined organisation requirements, preventing unnecessary aggregation or processing scope creep.

Security & Integrity Measures

Data Subject Rights

Robust technical and organisational safeguards, including encryption, strict access controls, and routine security audits, protect against unauthorized data access.

Individuals retain rights to access, rectify, restrict, or request erasure of their personal data, supported by structured internal verification processes.

Contact Governance Team
RETENTION & TRANSFERS

Data Protection Inquiries

Governance & Global Safeguards

For questions regarding this policy or to submit a formal data subject rights request, please contact our privacy compliance office directly.

Personal data is retained only for the duration required to fulfil contractual, legal, or regulatory obligations. Cross-border transfers adhere strictly to standard contractual clauses and recognized international transfer mechanisms.

Our designated Data Protection Officer oversees ongoing compliance audits, employee training, and continuous risk assessment across internal processing systems.