Data Protection Policy

This Policy applies to personal data processed by Ultravibrant, whether held electronically, in physical form, or through other means. It covers:

• Employees and job applicants.
• Customers and prospective customers.
• Vendors, suppliers and business partners.
• Other third parties whose personal data we process.

• Personal Data: Information that can directly or indirectly identify an individual, such as their name, email address, phone number or address.
• Processing: Any activity involving personal data, including collection, storage, use, disclosure or disposal.
• Data Subject: An individual whose personal data is collected or processed by the Company.

We follow the following principles when handling personal data:

We process personal data where necessary for:

• Providing and managing our products and services.
• Managing customer, vendor and business relationships.
• Managing employment and recruitment-related activities.
• Meeting contractual and legal obligations.
• Protecting our business operations and legitimate interests.
• Other purposes for which consent has been obtained, where applicable.

Where third-party service providers process personal data on our behalf, we take reasonable steps to ensure that appropriate data protection and security measures are maintained.

We implement appropriate technical and organisational measures to protect personal data, including:

• Access controls to restrict unauthorised access.
• Secure storage and handling of personal data.
• Appropriate security measures for electronic and physical records.
• Reasonable measures to prevent loss, misuse or unauthorised disclosure.

Employees and relevant personnel are expected to maintain the confidentiality of personal data and follow applicable data protection practices.

In the event of a personal data breach, Ultravibrant will:

1. Identify and contain the breach.
2. Assess the potential impact.
3. Take appropriate corrective and preventive measures.
4. Notify affected individuals or relevant authorities where required by applicable law.

Personal data will be retained only for as long as necessary for business or legal purposes. When personal data is no longer required, it will be securely deleted, destroyed or anonymised, as appropriate.

Subject to applicable law, individuals may have the following rights:

• The right to access their personal data.
• The right to correct or update inaccurate information.
• The right to request deletion of their personal data where applicable.
• The right to withdraw consent where processing is based on consent.
• The right to raise a concern or grievance regarding the processing of their personal data.

Requests relating to these rights can be submitted to [Insert Email Address].

Ultravibrant is committed to maintaining appropriate data protection practices across the organisation. Key measures include:

• Maintaining appropriate data protection practices and procedures.
• Reviewing data handling practices periodically.
• Taking reasonable steps to ensure compliance with applicable data protection requirements.
• Providing relevant personnel with appropriate guidance on handling personal data.

This Policy may be reviewed and updated periodically to reflect changes in applicable laws, regulations, technology, or our business practices.

For questions, concerns, or requests relating to this Policy, please contact: