Privacy Policy

Introduction

Systek Online, a platform product of SysTek Limited ("we," "our," or "us"), is committed to protecting the privacy and security of our clients' personal data. This privacy policy outlines how we collect, use, store, and protect personal information in compliance with Papua New Guinea’s National Data Governance and Protection Policy (NDGPP).

Topics Covered

• What data do we collect?
• How do we collect your data?
• How do we use your data?
• How do we store and protect your data?
• Your data protection rights
• Data Breach Notification & Response
• Changes to our privacy policy
• How to contact us

What Data Do We Collect?

SysTek Limited collects the following data:

• Personal Identification Information: Any relevant information during Account Registration.
• Service-Related Information: Platform-specific logs related to user activity.
• Communication Records: Technical support communications related to our services.

How Do We Collect Your Data?

We collect data through:

• Client Registration: When you register for our services, providing necessary information for account setup and billing.
• Service Usage: Automatic collection of service usage logs and access data during your interaction with our services.
• Direct Communication: When you contact us via email or other communication channels for support or inquiries.

How Do We Use Your Data?

SysTek Limited uses your data to:

• Manage Your Account: Maintain and administer your account, including billing and service provision.
• Improve Services: Analyze service usage to enhance performance and user experience.
• Provide Support: Address technical issues and respond to your inquiries effectively.

We do not share your personal data with third parties for marketing or profiling purposes.

How Do We Store and Protect Your Data?

We store your data securely in Akamai Datacenters and utilize reputable mail relay providers. To protect your data, we implement:

• Containerized Hosting: Each website/domain operates in its own isolated container, ensuring vulnerabilities in one site do not affect others.
• Brute Force Protection: Mechanisms to detect and block repeated unauthorized login attempts.
• Web Application Firewall: Integration with reputable security filtering platforms.
• Automatic SSL Provisioning: Automated issuance and renewal of SSL certificates for encrypted data transmission.
• Role-Based Access Control (RBAC): Specific roles and permissions ensure users have appropriate access levels.

We retain your data for the duration of your service contract. Upon termination or breach of contract, all hosted data is permanently removed from our systems, unless otherwise requested.

Your Data Protection Rights

In compliance with Papua New Guinea’s National Data Governance and Protection Policy (NDGPP), you have the right to:

• Access Your Data: Request copies of your personal data.
• Rectify Inaccuracies: Request corrections to any inaccurate or incomplete information.
• Erase Data: Request deletion of your personal data under certain conditions.
• Restrict Processing: Request limitation on the processing of your data under certain conditions.
• Object to Processing: Object to the processing of your data under certain conditions.
• Data Portability: Request transfer of your data to another organization or directly to you under certain conditions.

To exercise these rights, please contact us using the information provided below.

Data Breach Notification & Response

SysTek Limited follows NDGPP guidelines for handling data breaches. In the event of a breach:

• Immediate Containment: The affected system is isolated to prevent further data exposure.
• Incident Investigation: We assess the breach's impact and determine affected users.
• User Notification: If your data is involved in a breach, we will notify you within a reasonable timeframe.
• Regulatory Reporting: Significant breaches will be reported to relevant authorities as required under NDGPP.
• Remediation & Prevention: We implement corrective actions to prevent future breaches.

Changes to Our Privacy Policy

We regularly review and update our privacy policy to reflect changes in our practices or for other operational, legal, or regulatory reasons.

How to Contact Us

If you have any questions or concerns about this privacy policy or our data practices, please contact us at:

Regulatory Authority

SysTek Limited complies with Papua New Guinea’s National Data Governance and Protection Policy (NDGPP). As the Data Protection Authority is still being developed under this policy, oversight is currently managed by the Department of Information and Communications Technology (DICT).

For more information, you can visit their official website: ict.gov.pg.