1. INTRODUCTION:
This Security Policy (“Policy”) describes the measures taken by Hashtag Ltd (“we”, “our”, “the Company”) to protect your information, data and systems. We work with regulated partners to ensure high standards of security and prevent unauthorised access, data breaches and technological risks.
2. Scope:
This Policy is intended to:
- Ensure the protection of sensitive data and corporate resources.
- Define clear standards for cybersecurity.
- Promote compliance with applicable data security regulations.
3. Scope of Application:
The Policy applies to:
- All employees, contractors and suppliers of Hashtag Ltd.
- All computer systems, devices and data managed by the Company.
- All sensitive information relating to customers, partners and business operations.
4. Security Measures:
4.1 Access Controls
- Access to company systems is permitted only to authorized personnel.
- Each user must use unique and complex credentials.
- Access to sensitive data is monitored and logged.
4.2 Data Protection
- All sensitive data is encrypted both in transit and at rest.
- Regular backups are performed to ensure business continuity.
- Secure deletion procedures are applied to delete data no longer needed.
4.3 Network Security
- Advanced firewalls and intrusion detection systems are active.
- Remote connections are protected by security protocols such as VPN and multi-factor authentication.
- Regular testing is performed to identify vulnerabilities.
4.4 Incident Management
- A detailed incident response plan is in place to address any security breaches.
- All incidents are recorded, analyzed and communicated to the relevant parties.
- The Company conducts periodic reviews to improve mitigation strategies.
5. Training and Awareness:
- All employees receive periodic training on cybersecurity and data protection.
- Awareness campaigns are organized to promote best security practices.
6. Regulatory Compliance:
Hashtag Ltd is committed to complying with all applicable laws, including:
- General Data Protection Regulation (GDPR).
- Local regulations on cybersecurity and data protection.
7. Monitoring and Review:
- Security systems are constantly monitored to detect any anomalies.
- The Policy is reviewed at least annually or in case of significant regulatory changes.
- Updates will be communicated to all relevant stakeholders.
8. Security Breaches:
8.1 Reporting
- All employees are required to immediately report any suspected violations or anomalies to the IT department.
8.2 Investigations
- Each violation will be thoroughly investigated to identify the causes and prevent future incidents.
8.3 Communication
- Customers and the competent authorities will be promptly informed in case of breaches involving their data.
9. Contacts:
For security related questions or reports:
- Support : support@hashtagwallets.com
- Compliance : compliants@hashtagwallets.com
10. Policy Changes:
This Security Policy will be updated periodically to reflect regulatory or technological changes.
Any material changes will be communicated to employees, suppliers and customers.