(Version 2.0 | Rev 12/20/2019)
1. PURPOSE AND INTENT
2. DATA PROTECTION PRINCIPLES
We will comply with applicable data protection law. This says that the personal information we hold about you must be: (i) used lawfully, fairly andin a transparent way; (ii) collected only for valid purposes; (iii) accurate and kept up to date; (iv) kept only as long as necessary for the purposes we have told youabout; and (v) kept securely.
3. DATA SECURITY
While no data security system can fully protect personal information from unauthorized data breaches, Spectraforce has implemented reasonablesafeguards and controls, consistent with its legal obligations under local, state, and federal laws. Spectraforce is committed to: (i) seeking to safeguard allpersonal information that you provide to us; (ii) seeking to ensure that it remains confidential and secure; and (iii) taking all reasonable steps to ensure thatpersonal privacy is respected. All our data is stored in written or electronic form on our servers and computers and in various physical locations. We maintainphysical, electronic and procedural safeguards to protect your personal information from misuse, unauthorised access or disclosure and loss or corruption by computerviruses and other sources of harm.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspectedbreach where we are legally required to do so.
4. DATA RETENTION
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes ofsatisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, we consider the amount, nature,and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which weprocess your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.In some circumstances we may anonymise your personal information so that it can no longer be associated with you, in which case we may use such information withoutfurther notice to you.
Once you are no longer an employee of Spectraforce, we will retain and securely destroy your personal information in accordance with Spectraforcerecord retention policies.