At SURPASS USA INC, we are committed to protecting the privacy and security of our customers' data. This Privacy and Data Handling Policy describes our practices regarding the collection, use, storage, and disposal of data.

Encryption

All data collected and processed must be encrypted with TLS 1.2+ (HTTPS). This ensures that all data is transmitted securely between our servers and external endpoints, preventing unauthorized access.

Storage and Tagging of Personally Identifiable Data (PII)

All data, especially Personally Identifiable Data (PII), must be stored in a separate database or at minimum PII must be tagged and identified within a database. We take the utmost care to protect your personal information, and we store it separately from other types of data. By doing this, we reduce the risk of unauthorized access to your personal information.

Encryption of Shared Data

All data that is shared must be encrypted using at least AES-128 or RSA-2048 bit keys. We understand the importance of protecting data when it is shared, and we use industry-standard encryption methods to ensure that your data is always safe.

Disposal of Data

All data must be disposed permanently and securely within 30 days of order delivery, and deletion must occur in accordance with NIST 800-88. We take data disposal seriously, and we ensure that all data is permanently deleted from our systems in accordance with industry-standard practices. We use the guidelines set forth by NIST 800-88 to ensure that all data is disposed of securely.

Contact Information

If you have any questions or concerns about our Privacy and Data Handling Policy, please contact us at info@surpass.biz. We are committed to protecting your privacy and will respond to your inquiry as quickly as possible.

Updates

We may update this Privacy and Data Handling Policy from time to time, and we encourage you to review it periodically. If we make any material changes, we will notify you by posting the new policy on our website or by sending you an email. Your continued use of our services after any modifications to this Privacy and Data Handling Policy constitutes your acceptance of such modifications.