Company Name: BITORYX
Effective Date: 11-09-2025
Website: https://bitoryx.org/
At BITORYX, protecting client data is central to our operations. We provide IT, BPO, business consulting, telecom/utility support, and energy services to individuals and organizations across the U.S. Our commitment to security, compliance, and transparency ensures our clients and partners—including financial institutions—can trust us with sensitive information.
We comply with a variety of U.S. regulations to ensure the security and privacy of the information we process:
GLBA (Gramm-Leach-Bliley Act):
We safeguard consumer financial data through strict administrative, technical, and physical protections.
PCI DSS (Payment Card Industry Data Security Standard):
All credit/debit card data is processed only through PCI DSS–compliant payment gateways. We do not store unencrypted cardholder information.
State & Federal Privacy Laws (CCPA, FTC, etc.):
We comply with U.S. consumer privacy regulations, including the California Consumer Privacy Act (CCPA) where applicable, and FTC fair information practices.
Data Processing Agreements (DPAs):
We require all vendors and partners handling data on our behalf to sign strict confidentiality and data security agreements.
We implement robust security practices to protect client data:
Encryption:
SSL/TLS encryption for data in transit; strong encryption standards for data at rest.
Access Controls:
Role-based access, multi-factor authentication (MFA), and continuous monitoring.
Network Defense:
Firewalls, intrusion detection/prevention, and 24/7 security monitoring.
Audits & Testing:
Regular vulnerability scans, penetration testing, and third-party compliance reviews.
Employee Training:
Mandatory privacy, data handling, and cybersecurity training for all staff.
Incident Response:
A documented breach response plan, with required notifications to clients and regulators under U.S. law.
We handle client data responsibly and securely:
Minimal Collection:
We collect only the information necessary to deliver our services.
Retention:
Financial and service data is retained only as long as legally required (e.g., 7 years for accounting/tax compliance).
Secure Disposal:
When no longer needed, data is securely deleted or anonymized.
Client Rights:
Clients may request access, correction, or deletion of their personal data, subject to legal obligations.
We recognize the trust placed in us by banks, payment processors, telecom providers, and energy suppliers. As part of our compliance program, we:
Maintain confidentiality agreements with all institutional partners.
Follow strict data security protocols that align with regulatory expectations of U.S. financial institutions.
Provide transparency and documentation to auditors, partners, and regulators upon request.
For any inquiries or concerns regarding this policy, please contact us at:
BITORYX
[Business Address]
[Support Email]
[Support Phone Number]
