Confidentiality Policy for Legal Bird
- Introduction
Legal Bird (“we,” “us,” or “our”) is committed to maintaining the confidentiality of sensitive information entrusted to us. This Confidentiality Policy outlines how we handle, protect, and manage confidential information. This policy applies to all employees, contractors, and third parties who have access to confidential information through their association with Legal Bird.
- Definition of Confidential Information
2.1. Confidential Information For the purposes of this policy, “Confidential Information” includes, but is not limited to:
- Personal data of users, clients, and employees.
- Business strategies, financial information, and proprietary data.
- Trade secrets, intellectual property, and research and development information.
- Any other information marked as confidential or that should reasonably be understood as confidential based on the circumstances of its disclosure.
2.2. Exclusions Confidential Information does not include information that:
- Is or becomes publicly available through no fault of the recipient.
- Is known to the recipient prior to disclosure and is not subject to any confidentiality obligation.
- Is independently developed by the recipient without reference to the Confidential Information.
- Is disclosed under the requirement of a court order, law, or governmental authority, provided that the disclosing party gives prior notice to the disclosing party, if legally permitted.
- Obligations of Confidentiality
3.1. Access and Use Confidential Information must be accessed and used only by authorized individuals who need it to perform their job responsibilities. Access to Confidential Information is restricted based on role and necessity.
3.2. Protection All individuals with access to Confidential Information are responsible for protecting it against unauthorized access, disclosure, or misuse. This includes:
- Using strong passwords and secure methods to store and transmit Confidential Information.
- Locking physical documents and devices containing Confidential Information when not in use.
- Avoiding discussions of Confidential Information in public or unsecured areas.
3.3. Non-Disclosure Confidential Information must not be disclosed to third parties without proper authorization. Authorized disclosures must be conducted under written agreements that specify confidentiality obligations equivalent to those set forth in this policy.
- Data Security Measures
4.1. Technical Safeguards We implement appropriate technical safeguards to protect Confidential Information, including encryption, secure networks, and access controls.
4.2. Physical Safeguards Physical safeguards include secure facilities, locked file cabinets, and access controls to prevent unauthorized physical access to Confidential Information.
4.3. Training We provide training to all employees and relevant third parties on the importance of confidentiality and the proper handling of Confidential Information.
- Handling Breaches
5.1. Reporting Any suspected or actual breach of Confidential Information must be reported immediately to the designated Privacy Officer or compliance team.
5.2. Investigation We will investigate any reported breaches promptly and take appropriate corrective actions to mitigate any harm caused. This may include notifying affected individuals and regulatory authorities as required by law.
5.3. Remediation We will review and update our practices, procedures, and security measures as needed to prevent future breaches and ensure ongoing protection of Confidential Information.
- Confidentiality Agreements
6.1. Employees and Contractors All employees and contractors with access to Confidential Information must sign confidentiality agreements that bind them to the terms of this policy.
6.2. Third Parties Third parties who have access to Confidential Information must enter into confidentiality agreements that impose equivalent obligations of confidentiality and data protection.
- Retention and Disposal
7.1. Retention Confidential Information will be retained only for as long as necessary to fulfill its purpose or as required by law.
7.2. Disposal When Confidential Information is no longer needed, it will be securely disposed of. This includes shredding physical documents and securely deleting electronic files.
- Policy Review and Updates
This Confidentiality Policy will be reviewed periodically and updated as needed to ensure its effectiveness and compliance with applicable laws. Any changes to this policy will be communicated to employees and relevant parties.
- Contact Information
If you have any questions about this Confidentiality Policy or need to report a breach, please contact at: Contact@Legalbird.in
Thank you for your cooperation in maintaining the confidentiality of sensitive information.
