Quality Waste Data Security Policy

Data Security Policy Last updated: July 31, 2024

1. Introduction

At Quality Waste, we understand the importance of protecting our customers’ sensitive information and ensuring the secure management of electronic waste. As a leading IT recycling company, we are committed to maintaining the highest standards of data security to prevent unauthorised access, use, disclosure, modification, or destruction of customer data.

2. Scope

This policy applies to all Quality Waste, employees, contractors, and third-party vendors who handle customer hard drives and data. It outlines the procedures and guidelines for the secure collection, storage, transportation, and destruction of electronic devices containing sensitive information.

3. Data Security Objectives

Our data security objectives are to:

• Protect customer data from unauthorised access, theft, or loss.
• Ensure the secure erasure of data from electronic devices.
• Comply with relevant laws, regulations, and industry standards for data security.
• Maintain transparency and accountability in our data handling practices.
• Provide our customers with confidence in our ability to manage their sensitive information.

4. Security Measures

To achieve our data security objectives, we have implemented the following measures:

• Secure Collection: Customer hard drives and electronic devices are collected in a secure and controlled manner to prevent loss or theft.
• Storage: Devices are stored in a secure, access-controlled facility with 24/7 monitoring and surveillance with police alarm response.
• Transportation: Devices are transported in secure, GPS-tracked vehicles with authorised personnel only.
• Data Erasure: We use industry-approved data erasure software to completely wipe customer data from devices, ensuring that all information is unrecoverable.
• Destruction: Devices are physically destroyed using a secure, environmentally responsible process to prevent any potential data recovery.

5. Access Control

Access to customer data and devices is restricted to authorised personnel only, who have undergone thorough background checks and training on our data security protocols. All employees and contractors are required to sign confidentiality agreements and are subject to regular security clearance checks.

6. Incident Response

In the event of a data security incident, we have a comprehensive incident response plan in place to ensure prompt notification, containment, and remediation. Our incident response team will investigate the incident, take corrective action, and notify affected customers and regulatory authorities as required.

7. Training and Awareness

All employees and contractors are required to undergo regular training and awareness programs on data security best practices, industry standards, and company policies. This ensures that our team is equipped to handle customer data with the utmost care and security.

8. Compliance

Our data security policy is regularly reviewed and updated to ensure compliance with relevant laws, regulations, and industry standards, including GDPR guidelines.

9. Customer Assurance

We provide our customers with a Certificate of Data Destruction, which guarantees that their devices have been securely erased and destroyed. We also offer customised data security solutions to meet the specific needs of our customers.

10. Conclusion

At Quality Waste, we are committed to maintaining the trust of our customers by protecting their sensitive information and ensuring the secure management of electronic waste. Our data security policy is a cornerstone of our business, and we are dedicated to continuous improvement and excellence in this area.