Data Protection Policy

1. Purpose and responsibilities

This policy sets expectations for handling personal information through Innotique Global. It applies to users and service participants who receive access to customer, partner, engineer, or account information. It complements the Privacy Policy and any applicable confidentiality or data-processing agreement.

An organisation providing services through the platform remains responsible for the information it supplies and the people it authorises. This policy alone does not establish every contractual term required for a controller–processor relationship.

2. Use only what is needed

• Handle personal information for the assigned business purpose and only with appropriate authority.
• Keep entries accurate and relevant. Avoid unnecessary identity documents, sensitive details, or unrelated personal information in ticket notes.
• Use information only for the work or administration for which it was provided; do not build unrelated contact lists or use it for unsolicited marketing.
• Follow applicable retention instructions and legal requirements. Refer deletion requests affecting financial or work history for review.

3. Access, files, and communications

• Use individual accounts and the permissions granted to you. Never share passwords or use another person’s account.
• Check recipients before sharing documents and use the authorised platform or agreed secure channel.
• Protect downloaded files and devices. Do not leave customer documents on shared computers or publicly accessible storage.
• Do not copy records between companies or disclose them to unassigned personnel without authorisation.

4. Incidents and privacy requests

Report suspected unauthorised access, loss of a device containing work data, accidental disclosure, or a misdirected document promptly. Include the affected service or record and what happened; avoid repeating sensitive information unnecessarily.

Preserve relevant evidence, follow incident instructions, and do not conceal or independently erase affected audit records. Innotique Global and the responsible organisation must assess containment and any legally required notifications.

Forward privacy requests to the appropriate responsible contact. Do not disclose another person’s records until authority and identity have been checked.

5. Partners and review

Service partners should ensure that the people they assign understand confidentiality and data-handling requirements. Further processing, subcontracting, and international transfers must follow the applicable agreement and privacy law.

Access and handling practices should be reviewed when roles, services, or providers change. This policy is a handling standard, not a certification or a guarantee that a security incident cannot occur.