# MAPMAN LIMITED DATA PROTECTION POLICY

This is the d

## Promoting our services

We may also wish to promote the fact that we have worked for particular clients by using their business names and logos on a testimonials page on our website and on marketing materials. If you are not content with us using your business name and logo in this way, please tell us at any time.

## 2 How we protect your information

The internet is not a secure medium. However, we have put in place various security procedures as outlined below –

- Password protection for all users’ accounts
- A 24/7 Security Operations Center for monitoring and threat detection
- An Intrusion Detection System (IDS) to detect malicious activity
- Continuous security monitoring of log data through a Security Information and Event Management (SIEM) platform that is reviewed by security experts
- A Web Application Firewall (WAF) to mitigate against common web application attacks such as cross-site scripting (XSS)
- FIPS 140-2 compliant encryption for data-in-transit and data-at-rest
- A hardened network and virtual machine environment utilizing advanced inbound/outbound traffic rules
- Mandatory continuous application, system, and database scans
- Yearly vulnerability assessment, penetration testing, and security control reviews by an accredited Third Party Assessment Organization (3PAO)

We also keep your information confidential. Our internal procedures cover the storage, access, disclosure and deletion of your information.

Owing to the global nature of the Internet infrastructure, and the fact that some of our partners are based abroad, the information you provide may be transferred in transit to countries outside the EU/European Economic Area that do not have similar protections in place regarding your data and its use as set out in this policy. However, we have taken the steps outlined above to try to improve the security of your information. By submitting your information, you consent to these transfers.

## 3 Sale of business

If our business is sold or integrated with another business your details may be disclosed to our advisers and any prospective purchasers and their advisers and will be passed on to the new owners of the business.

## 4 Updating your details

If any of the information that you have provided to us changes, for example if you change your e-mail address, name or payment details or if you wish to cancel your registration, please let us know the correct details by sending an e-mail to us at [pete.wain@mapman.ltd](mailto:pete.wain@mapman.ltd).

We will update the information held by us to reflect the changes you tell us about.

## 5 Termination

On termination of the contract between us, we will –

(a) on request by you, supply you with your non-