1. Data Protection and Privacy

• We adhere to strict data protection protocols to securely store and process personal, financial, or sensitive information.
• All client data is stored in secure, encrypted servers with controlled access.
• We commit to using data solely for providing agreed services and never share it with third parties without explicit consent, unless required by law.

2. Confidentiality Agreement

• All employees, contractors, and service providers are bound by confidentiality agreements.
• Project details, designs, and strategies shared with us remain confidential and protected from unauthorized disclosure.

3. Secure Communication Channels

• We use encrypted email services and secure file-sharing platforms for communication.
• Clients are encouraged to use secure, password-protected platforms when sharing sensitive information.

4. Cybersecurity Measures

• We use firewalls, anti-malware tools, and secure networks to safeguard systems and client data.
• Our team is trained in the latest security practices to ensure safe data handling.

5. Regular Security Audits

• We conduct regular audits and vulnerability assessments.
• Any identified risks are promptly addressed to maintain high security standards.

6. Access Control

• Access to client data is limited to authorized personnel only.
• Role-based access controls (RBAC) ensure access only where necessary.
• Background checks are performed before employees or contractors gain access to sensitive data.

7. Incident Response Plan

• In case of a breach or incident, we follow a structured response plan.
• Affected clients are notified promptly, and corrective measures are taken immediately.

8. Client Responsibilities

• Clients should adopt strong security practices, including using strong passwords and securing their devices.
• Avoid sharing sensitive data over unsecured communication channels.

9. Compliance with Laws

RBSH Studio complies with all applicable local, national, and international data protection laws and regulations, including GDPR and the Information Technology Act, 2000 (India).