Our commitment

Ace Management Systems Consultant is committed to protecting the rights and privacy of our employees, students, clients, volunteers, contractors, and partner organisations. We handle all personal information in accordance with applicable national and international data protection laws.

Any breach of these laws or this policy is treated as a serious offence and may lead to disciplinary action.

How we handle personal information

We will

• 1Collect only what is necessary for a specific, legitimate purpose and never beyond the stated need.
• 2Ensure that personal data is accurate, relevant, and kept up to date.
• 3Retain personal data only as long as necessary to fulfil its purpose.
• 4Disclose personal data only for its original purpose, unless the individual consents to a new use.
• 5Avoid using personal data for direct marketing without giving the individual a clear opt-out option.
• 6Apply appropriate technical and organisational measures to protect against unauthorised access, loss, destruction, or misuse.

Management, accountability & enforcement

We will

• 1Assign clear responsibility for compliance with data protection laws to designated staff.
• 2Maintain internal controls to verify compliance with legal and company requirements.
• 3Take all reasonable steps to ensure personal information is complete, accurate, and secure.
• 4Investigate and resolve any data protection concerns promptly.
• 5Communicate our complaint-handling process to individuals whose personal information we hold.

Computer & email security

We will

• 1Restrict system access to authorised personnel only.
• 2Maintain automatic software updates and install reliable antivirus protection.
• 3Encrypt or password-protect sensitive email content.
• 4Use BCC (blind carbon copy) for group emails to protect recipients' details.
• 5Regularly monitor outgoing group communications for privacy compliance.
• 6Use strong passwords (minimum 8 characters, mixed case, numbers, symbols) and avoid leaving devices unlocked or screens unattended.
• 7Shred sensitive waste and maintain physical workplace security.

Staff training & awareness

We will

• 1Provide ongoing training so staff understand their responsibilities under this policy.
• 2Define clear roles and responsibilities for handling, storing, and securing personal data.
• 3Stay informed on emerging technologies and ensure our staff understand their data protection implications.

Review of policy

This policy will be reviewed annually or whenever there are significant changes in legislation, technology, or operational practices.