Confidentiality Policy

Effective Date: 01/01/2025
Last Updated: 01/01/2025

​

1. Purpose

This Confidentiality Policy outlines Megalith commitment to protecting sensitive, proprietary, and personal information. It establishes the standards for handling, storing, and sharing confidential data to ensure privacy and security.

2. Scope

This policy applies to:

• All employees, contractors, consultants, and third-party vendors of Megalith

• All forms of information, including verbal, written, electronic, or otherwise, that is designated as confidential or is reasonably understood to be confidential by nature.

3. Definitions

• Confidential Information: Any non-public information, including but not limited to:

  • Personal data (e.g., names, contact details, health records, financial data).

  • Proprietary business information (e.g., strategies, trade secrets, client lists).

  • Intellectual property.

• Data Subject: An individual whose personal information is collected, used, or stored by Megalith.

4. Principles of Confidentiality

We adhere to the following principles to protect confidential information:

1. Access Restriction: Confidential information is only accessible to authorized personnel who require it to perform their duties.

2. Data Minimization: Only the minimum amount of information necessary will be collected, processed, or disclosed.

3. Security Measures: Robust technical and organizational measures will be in place to protect data from unauthorized access, alteration, or loss.

4. Legal Compliance: All activities involving confidential information will comply with applicable laws and regulations.

5. Employee and Partner Obligations

Employees, contractors, and vendors must:

• Sign confidentiality agreements as part of their engagement.

• Not disclose or share confidential information without proper authorization.

• Report any suspected breaches of confidentiality immediately.

6. Information Sharing

Confidential information may only be shared under the following conditions:

• With explicit consent from the data subject (if applicable).

• When required by law or legal proceedings, after consultation with legal counsel.

• With trusted third parties, subject to confidentiality agreements.

7. Data Retention and Disposal

Confidential information will be retained only as long as necessary for the purposes for which it was collected. Secure methods of disposal, such as shredding or permanent data deletion, will be used when information is no longer needed.

8. Breach of Confidentiality

A breach occurs when confidential information is accessed, disclosed, or used without authorization.
In the event of a breach:

• Immediate steps will be taken to mitigate harm.

• Affected parties will be notified, as required by law.

• Disciplinary action, up to and including termination, may be taken against those responsible.

9. Review and Updates

This policy will be reviewed annually or as needed to address changes in laws, regulations, or organizational practices. Updates will be communicated to all relevant parties.

Contact Information:
For questions or concerns regarding this policy, please contact:
Megalith
57 Boulevard de Beausejour
mega@aimegalith.com
+33 766 614 377