1. Purpose
Xanvex Global (“we,” “our,” “us”) is committed to protecting the privacy, confidentiality, integrity, and availability of personal and business data. This Data Protection Policy outlines how we collect, process, store, and secure information in compliance with global regulations, including GDPR, ISO 27001, and PCI-DSS.
2. Scope
This policy applies to:
- All employees, contractors, and partners of Xanvex
- All customer, client, and employee data processed by Xanvex
- All physical, digital, and cloud-based environments where data is stored or processed
3. Data Principles
Xanvex follows these core data protection principles:
- Lawfulness, Fairness & Transparency – Data is collected and processed legally and with transparency.
- Purpose Limitation – Data is collected only for specified business purposes.
- Data Minimization – Only data necessary for operations is processed.
- Accuracy – Data is kept accurate and up to date.
- Storage Limitation – Data is retained only as long as necessary.
- Integrity & Confidentiality – Data is protected against unauthorized access, alteration, or loss.
- Accountability – We maintain full responsibility for compliance.
4. Data Collection & Processing
Xanvex collects and processes:
- Client Data: Business information necessary for delivering outsourcing services.
- Customer Data: Personally identifiable information (PII) handled on behalf of clients in CX, collections, or back-office processes.
- Employee Data: Personal, payroll, and performance data for HR purposes.
Processing activities include customer service, revenue operations, collections, compliance checks, financial reporting, and automation.
5. Data Security Measures
To protect sensitive information, TrivaX implements:
- Encryption of data in transit and at rest
- Access Controls (role-based, least privilege, MFA/SSO)
- Regular Audits & Monitoring
- Incident Response Protocols for breaches
- Data Backup & Disaster Recovery Plans
- Secure Infrastructure with redundant systems and 99.9% uptime
6. Data Subject Rights
Under applicable laws (e.g., GDPR), individuals have the right to:
- Access, update, or correct their data
- Request deletion of personal data (“Right to be Forgotten”)
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
Requests can be made by contacting contact@xanvexgloabl.com
7. Third-Party Data Handling
Xanvex may engage trusted third-party vendors (e.g., technology platforms, cloud providers). All third parties must comply with equivalent data protection and confidentiality standards under signed agreements.
8. Incident Management
In the event of a data breach:
- Xanvex will investigate immediately
- Contain and mitigate risks
- Notify affected parties and regulatory authorities (as required by law) within stipulated timelines
9. Training & Awareness
All employees receive mandatory data protection and security training, including handling of sensitive client and customer information.
10. Policy Review
This policy is reviewed annually or whenever significant changes in regulations or operations occur.
Effective Date: May 22 2025
