Privacy Policy and Safeguarding Agreement 08/2011 Page 1 of 3

PRIVACY POLICY AND SAFEGUARDING AGREEMENT

 

The nature of our business is such that the Company has confidential and proprietary

information relating to its business policies, practices, methods of operations, and customer

lists. In addition, we deal with confidential and proprietary information received from our

customers. Each employee should understand the importance of making sure this information

is protected from disclosure to competitors, suppliers, vendors, and all other persons.

Every employee has a legal and ethical obligation to take all steps reasonably necessary in

order to keep the Company's and clients' affairs confidential. This obligation continues even

after an employee leaves the Company. Information obtained by the Company and its

employees should be treated at all times with the utmost confidentiality and discretion and

should not be disclosed to anyone other than Company employees and others having a need to

know. For this purpose, all Company information and client information should be considered

confidential unless, beyond any doubt, the information is widely known and its disclosure would

not be detrimental to the client.

 

Conversations in public

Have conversations about Company and client matters only with those who have a need to

know, and take care to avoid such conversations where those who do not need to know may

overhear. Conversations about such information in public places, such as elevators,

restaurants, and airplanes should be avoided, and confidential matters should not be discussed

with spouses, other relatives, or friends.

 

Client documents and materials

Do not leave Company and client documents or materials where they can be seen by any

unauthorized person, such as in unattended conference rooms, on your desk, near the fax

machine, on copy machines, in the mail room, or any other public locations. Do not discard

documents containing confidential information without first shredding the documents. Do not

stay logged in to your computer without having a password-protected screen saver in operation.

 

Support Personnel and Vendors

Care should be taken to ensure that persons who are providing support to the Company (such

as computerized data services, copy services, and experts) and Vendors receive only

information which they have a need to know and the Business Office will inform them of the

nature of the confidentiality and the measures taken to protect confidentiality. Support

Personnel and Vendors must sign this Policy and Agreement before any customer information is

shared with them.

 

Safekeeping of financial information

All financial information shall be kept confidential and locked in file cabinets each evening.

Employees are not to take any financial information of the Company or its clients home to work

on or otherwise remove it from the office unless there is specific business need to do so.

Employees are not permitted to keep financial information, including credit applications, credit

reports or contracts at their desks or on the fax machine for any purpose other than to collect

the information and to immediately transfer/transmit the information to the financial institution or

to management staff to be placed in locked storage. Customers and vendors should not be left

alone in your office unless all customer information is in locked storage. Financial information

Instructions: Have employee sign and date, give one copy to employee and place one copy in personnel file.

Privacy Policy and Safeguarding Agreement 08/2011 Page 2 of 3

and other personal information should never be left unlocked at your desk for any reason or for

any period of time, regardless of the reason or the fact that you are working on the information.

You should never share financial information or other personal information with anyone else in

the company unless it is necessary for the purpose of completing the business transaction.

Such information should only be shared on a need-to-know basis. Customer information must

be in a locked storage area at all times. You should check to make sure the storage area

(whether it is a room, a cabinet or your desk drawer) is locked each time you access the storage

area.

You should never share or divulge your password providing access to the computerized data for

any reason under any circumstance. Your password should not be stored where others can

access it but should be kept in locked storage or in another place where others cannot access it.

Downloading information on the Internet to our computer systems may provide outside access

to our systems. Therefore, you must not download any information from the Internet to our

computer system without written authorization from the Security Program Coordinator.

If you need to dispose of any documents containing customer information, you must shred the

documents prior to deposing of them.

You should never transmit customer information over the Internet or by email, under any

circumstances.

You should never store customers' non-public personal information or financial information on

PDA's, portable computers or other electronic devices unless you have written authorization to

do so by the Security Program Coordinator so that security issues can be addressed prior to

placing such information at risk.

You must never provide customer information to any callers over the telephone even if they

appear to be legitimate business inquiries. All communication of customer information should

be through written secure means such as facsimile to a known service provider or vendor who

has agreed to abide by our policy or through other secure (encrypted) transmission. If you

receive a call from a person attempting to obtain customer information, you should immediately

transfer them to the Security Program Coordinator who will report the incident to law

enforcement officials if necessary.

You must never use or reproduce customer information, whether electronic or non-electronic,

for your own personal use or the use of others unless for approved business purposes.

If you cease to be employed at the company, you shall not access and may not review any

customer information from the moment you are no longer employed.

 

Release of Confidential Information

In the event that an employee inadvertently releases confidential information, the employee

should immediately inform his or her department manager so the appropriate action may be

taken. Any release of information, whether or not intentional, may be grounds for disciplinary

action, up to and including termination. By signing below, the employee also agrees that he/she

will notify the department manager immediately if any anticipated threats or hazards to the

security of customers' personal information are suspected or detected or if the employee is

aware of unauthorized access or sharing of customer information.

Privacy Policy and Safeguarding Agreement 08/2011 Page 3 of 3

 

CONFIDENTIALITY AGREEMENT

As an employee of the Company, the undersigned acknowledges that from time to time he or

she will receive confidential and proprietary information concerning the business of the

Company. The undersigned further acknowledges that such information, if shared directly or

indirectly with third parties, could be detrimental to the Company because it would place the

Company at a competitive disadvantage if disclosed, and that but for his or her employment at

the Company he or she would not receive such information, as it is not available to the public.

Accordingly, the undersigned agrees that he or she, except as necessary to conduct business of

the Company, shall not disclose, copy, communicate, or divulge to, or use the direct or indirect

benefit of any person, firm, association, or company other than the Company, any material

provided by the Company, including but not limited to business methods, business policies,

procedures, techniques, research, or development projects or results, trade secrets, or other

knowledge or process of or developed by the Company or any other confidential information

relating to our dealing with the business operations or activities of the Company made known to

the undersigned or learned or acquired by the undersigned while an employee of the Company.

When the undersigned leaves the employ of the Company, he or she agrees to return all of the

Company's documents and property in his or her possession, including but not limited to

manuals, drawings, notebooks, reports, customer lists, pricing lists, and/or prospect lists.

Confidential information or material of the Company includes any information or material: (a)

generated, collected, or utilized by the Company in its operations relating to the actual or

anticipated business or research and development of the Company or (b) suggested by or

resulting from any task assigned to me or work performed by me for or on the behalf of the

Company and that has not been made available generally to the public.

In addition to confidential information about the Company, the undersigned acknowledges that

he or she will also receive confidential information about clients and customers of the Company.

The undersigned agrees that all provisions of this agreement and the attached Privacy

Statement applicable to confidential information belonging to the Company will also apply to

information received from and/or about clients and customers. The undersigned agrees to

comply with this agreement and the attached Privacy Statement and the Company's Information

Security Program, or any amendments to these documents that may be made from time to time.

I also agree to complete the required security training. I agree that I will not access or view any

customer information that is not necessary to the performance of my job duties.

The undersigned acknowledges that violation of any part of this agreement is grounds for

immediate termination.