HTGSOFT CORPORATE

Personal Data Protection Policy

HTGSOFT principles for processing and protecting personal data across our digital channels.

1. Processing principles

Personal data should be processed for clear purposes, limited to what is reasonably necessary, protected with appropriate safeguards and retained only for justified periods.

2. Consent and other lawful grounds

Where consent is the applicable basis, HTGSOFT provides a choice before optional processing begins and enables withdrawal for future processing. Other processing may be performed when necessary to respond to a request, perform a contract, secure systems, meet legal obligations or support legitimate business purposes as permitted by applicable law.

3. Data subject requests

Requests relating to personal data can be submitted to HTGSOFT. We may need to verify identity and scope before acting on a request.

4. Processor and system governance

Access to systems containing personal data is limited according to role and operational need. Integrations with HTG.iBusiness, analytics or other systems should follow authenticated APIs, audit logging and least-privilege access.

5. Incident response

HTGSOFT maintains operational procedures to assess and respond to suspected security or personal-data incidents and to take appropriate notification or remediation actions where required.

6. Contact

Personal-data questions may be sent to info@htgsoft.com.