Amazon Privacy Policy

1. Introduction

We are committed to safeguarding the privacy and security of your personal data and Amazon Information. This Privacy Policy outlines how we collect, process, store, and dispose of data, including Amazon Information, in compliance with data protection regulations and Amazon’s policies. It also details the measures we have in place to ensure the privacy and security of the information we manage.

2. Data Collection, Processing, and Use

All Amazon Information collected is used exclusively for the purpose of managing our internal operations. We collect and process this data strictly according to Amazon’s guidelines and applicable data protection laws.

We Do Not Share Data:

Our organization does not share any Amazon Information with third parties. All data remains within our organization and is only accessed by authorized personnel. We ensure that data is used solely for its intended purpose and is not disclosed to external entities under any circumstances.

3. User Rights and Data Access Requests

You have the right to request access to your data, request corrections, or request its deletion. All requests will be handled in accordance with applicable data protection laws, and we commit to responding to verified requests within 30 days.

To exercise your rights, please contact our Data Protection Officer at [contact information].

4. Cookies and Tracking Technology

Our website uses cookies and tracking technology to enhance user experience, but this technology is only applied on our website. It is not used within our internal tools that manage Amazon Information.

Our internal systems for Amazon data are isolated from any tracking or cookie-based technologies, ensuring that data collected from Amazon remains secure and protected from external tracking.

5. Third-Party Service Providers

While we may use third-party service providers for certain services related to our website or general business processes, our internal tools that manage Amazon Information are never shared with third parties. All Amazon data remains confidential and is handled only by authorized personnel within our organization.

We carefully vet all third-party service providers to ensure they comply with our data protection and security standards, and we limit their access to only the necessary data required to perform specific services.

6. Data Security and Protection Measures

We employ a comprehensive set of security controls to ensure the protection of all Amazon Information. These measures include:

• Firewalls: Robust firewall configurations restrict unauthorized access to internal systems, allowing only essential traffic.
• Multi-Factor Authentication (MFA): All systems require MFA for secure access, ensuring that only authorized personnel can access sensitive data.
• Encryption: We use AES-256 encryption for data stored at rest and Transport Layer Security (TLS) for data in transit to protect information.
• Role-Based Access Control (RBAC): Access to sensitive data is managed via role-based access control to ensure that employees only have access to the data necessary for their roles.
• Network Segmentation: Critical systems are isolated from public-facing applications, ensuring that sensitive data is protected from unauthorized access.
• Regular Security Audits: We conduct regular internal and external security audits to identify and address potential vulnerabilities.

7. Data Breach Notification

In the event of a data breach involving Amazon Information, we will notify Amazon within 24 hours of discovering the breach. Affected individuals will also be notified in compliance with applicable laws and regulations. We will take immediate steps to contain and mitigate the breach, including isolating affected systems and conducting a thorough investigation.

8. Data Disposal Practices

Our organization follows strict data disposal policies to ensure that no Amazon Information is retained beyond its required purpose. Once data is processed and no longer needed, it is securely deleted or destroyed. We ensure that no data is stored or archived unnecessarily, following data minimization principles.

9. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy as necessary. Any changes will be communicated via our website, and the revised policy will be effective immediately upon posting. We encourage you to review this policy periodically to stay informed about how we are protecting your data.

10. Monitoring and Prevention of Unauthorized Access

We employ monitoring and prevention mechanisms to ensure that Amazon Information is not accessed from unauthorized devices, such as personal USB drives or cellphones. Our security systems include:

• Data Loss Prevention (DLP): DLP software prevents data transfer to unauthorized devices.
• Logging and Alerts: All access attempts are logged, and alerts are triggered if suspicious activity is detected. Our security team is immediately notified via email in the event of unauthorized access attempts.

11. Incident Response Plan

Our incident response plan outlines the steps to be taken in the event of a data breach or security incident, including:

1. Immediate Investigation: Our security team will investigate the incident to determine the nature and scope of the breach.
2. Containment: We will isolate affected systems to prevent further unauthorized access.
3. Notification: Amazon and affected individuals will be notified within 24 hours if the breach involves Amazon Information.
4. Remediation: Corrective actions will be taken to address the root cause of the breach and prevent future incidents.

12. How We Handle Code Vulnerabilities and Penetration Tests

We conduct regular vulnerability scans and penetration tests to ensure the security of our systems. Any vulnerabilities discovered are logged, prioritized based on severity, and assigned to a responsible team member. We track remediation progress through daily standups and ensure that vulnerabilities are resolved promptly.

13. Password Management Practices

We enforce strict password management practices to protect access to our systems, including:

• Passwords must be at least 12 characters long and include a mix of uppercase, lowercase, numbers, and special characters.
• Passwords must be rotated every 30 days.
• Multi-factor authentication (MFA) is required for all systems.

14. Data Retention and Disposal

We do not store Amazon Information beyond its immediate purpose. All data is securely processed and disposed of in line with legal requirements, ensuring that no unnecessary data is retained.

15. Contact Information

If you have any questions or concerns about this privacy policy, please contact us at:

jodie@drinkiba.com