Data Protection
Policy

Data protection is an essential part of our governance, operational processes, and corporate responsibility. We are committed to collecting, processing, and storing information in a lawful, transparent, and secure manner.

• Protecting personal and business information.
• Maintaining confidentiality and data integrity.
• Preventing unauthorized access and disclosure.

As part of our operations, we handle categories of information that require protection, including personal data, client information, technical project documentation, and financial records.

Information is collected only where reasonably necessary to support legitimate engineering activities and professional service delivery.

Our approach ensures that information is collected fairly, used only for legitimate business purposes, kept accurate, and protected against unauthorized access. We ensure data is retained only as long as necessary and securely disposed of thereafter.

We implement practical administrative, technical, and organizational controls designed to reduce risk. Access to information is granted only to authorized personnel who require it for legitimate business purposes using strict role-based controls.

Information is retained only for as long as necessary to support business operations or legal requirements. When no longer required, data is securely deleted, destroyed, or anonymized using methods that prevent unauthorized recovery.

Data protection depends on every individual within UIT. We support a culture of responsible information management through regular awareness initiatives and strict adherence to internal security procedures.