1. Commitment to Data Security
Devlip adheres to industry-standard data security practices including AES-256 encryption at rest, TLS 1.3 transit encryption, strict role-based access control (RBAC), and multi-factor authentication (MFA) across all internal systems.
2. Incident Response
In the unlikely event of a security compromise affecting personal data, Devlip will notify affected parties and regulatory authorities within seventy-two (72) hours in compliance with GDPR Article 33.
3. Client Account Access
Access to client marketplace accounts is requested only through the official user-permission and sub-user features provided by each platform. Devlip does not ask clients to share primary account passwords, and access is limited to the staff assigned to the engagement. Access is removed when an engagement ends.
4. Data Minimisation & Retention
We collect only the information required to deliver the contracted services. Project records are retained for the duration of the engagement and for the period required by applicable tax and corporate record-keeping law, after which they are securely deleted or anonymised.
5. Contact
Questions about how we protect data, or requests to exercise your data protection rights, may be sent to info@zakstechltd.com.
Corporate Reference: This policy document is an integral component of the service agreements executed by Devlip Technologies Ltd.
Direct all formal inquiries to: Devlip Technologies Ltd Legal Department — info@zakstechltd.com.