Privacy Policy

1. Purpose

This Privacy Policy establishes the standards and procedures for the collection, use, storage, transmission, and protection of confidential and sensitive client information handled by Alltek Holdings Inc while delivering information technology, cybersecurity, cloud, and telecommunications services.

Alltek Holdings Inc is committed to protecting client information and maintaining the confidentiality, integrity, and availability of all data entrusted to us.

2. Scope

This policy applies to:

• All employees, contractors, and authorized representatives of Alltek Holdings Inc
• All systems owned, operated, or managed by the company
• All client information stored, processed, transmitted, or accessed by company personnel or systems
• All services provided by Alltek Holdings Inc, including IT management, cybersecurity services, consulting, cloud services, and Voice over IP (VoIP) communications

3. Definitions

Client Information

Client Information refers to any data or information belonging to or provided by a client, including but not limited to:

• Business information
• Personal data
• Authentication credentials
• Financial records
• Network architecture or security information
• Communications data
• Technical system data
• Confidential or proprietary information

Sensitive Information

Sensitive Information includes any information that, if disclosed, altered, or destroyed without authorization, could result in harm to a client, individual, or organization.

Examples include:

• Personally identifiable information (PII)
• Financial information
• Health information
• Confidential business data
• Security credentials
• System access information

4. Data Collection and Use

Alltek Holdings Inc collects and processes client information only as necessary to:

• Deliver contracted services
• Maintain and support client systems
• Monitor system performance and security
• Provide technical support
• Comply with legal or regulatory obligations
• Improve service reliability and security

Client information is not sold, rented, or disclosed to third parties except as required to deliver services or comply with legal obligations.

5. Confidentiality Commitment

All employees, contractors, and authorized personnel of Alltek Holdings Inc are required to:

• Maintain strict confidentiality of client information
• Access client data only when necessary to perform job responsibilities
• Protect information from unauthorized disclosure
• Comply with company security policies and procedures

Confidentiality agreements are required for all personnel with access to client data.

6. Administrative Safeguards

Alltek Holdings Inc implements administrative controls to safeguard client information, including:

Access Management

• Access to client information is restricted to authorized personnel
• Role-based access controls are implemented where possible
• Access permissions are reviewed periodically

Security Training

Personnel receive training regarding:

• Information security best practices
• Data privacy responsibilities
• Identifying and reporting security threats
• Handling confidential client information

Policy Enforcement

Failure to comply with security policies may result in disciplinary action, up to and including termination of employment or contract.

7. Technical Safeguards

Alltek Holdings Inc utilizes industry-standard technical safeguards to protect client information.

Authentication and Access Control

• Strong authentication mechanisms are used to protect systems
• Multi-factor authentication is required for remote or administrative access when feasible

Encryption

Where appropriate:

• Data transmitted across public networks is encrypted
• Sensitive data stored on systems may be encrypted

Endpoint Protection

Systems under management may include security technologies such as:

• Antivirus and anti-malware solutions
• Endpoint detection and response (EDR)
• System monitoring and alerting

Network Security

Security measures may include:

• Firewalls
• Secure remote access solutions
• Intrusion detection or prevention systems
• Network monitoring tools

8. Physical Security

Alltek Holdings Inc maintains reasonable physical safeguards to protect equipment and data including:

• Controlled access to offices and technical infrastructure
• Secure storage of devices and media
• Secure disposal of equipment containing client data

9. Telecommunications and VoIP Data

When providing telecommunications or Voice over IP (VoIP) services, Alltek Holdings Inc may process certain communication metadata necessary for service operation.

Security controls are implemented to protect telecommunications infrastructure and prevent unauthorized access, misuse, or fraud.

Call recordings, logs, or communication data—if utilized—are handled with the same confidentiality protections as other client data.

10. Third-Party Service Providers

Alltek Holdings Inc may utilize third-party vendors, cloud providers, or subcontractors to deliver services.

When such providers may have access to client information:

• Vendors are evaluated for appropriate security practices
• Contracts include confidentiality and data protection requirements
• Access to client data is limited to what is necessary to perform services

11. Data Retention and Disposal

Client information is retained only for as long as necessary to:

• Fulfill contractual obligations
• Maintain service records
• Comply with applicable legal requirements

When data is no longer required, it is securely disposed of through methods such as:

• Secure deletion
• Media sanitization
• Physical destruction of storage media

12. Security Incident Response

Alltek Holdings Inc maintains procedures for identifying and responding to security incidents involving client information.

In the event of a confirmed data security incident:

• The issue will be investigated promptly
• Appropriate containment and remediation actions will be taken
• Affected clients will be notified when required by law or contract

13. Regulatory Compliance

Alltek Holdings Inc endeavors to comply with applicable privacy and security regulations where relevant to client operations, which may include:

• The Health Insurance Portability and Accountability Act
• Other applicable federal, state, or international privacy laws

Specific contractual agreements may further define compliance responsibilities.

14. Client Responsibilities

Clients are responsible for:

• Managing user access within their organization
• Protecting credentials and authentication methods
• Promptly reporting suspected security incidents
• Following recommended security practices

Shared responsibility for information security exists between the client and service provider.

15. Policy Updates

Alltek Holdings Inc may update this Privacy Policy periodically to reflect:

• Changes in services
• Changes in technology
• Updates to regulatory requirements
• Improvements to security practices

The most current version of this policy will be maintained by the company.

16. Contact Information

For questions regarding this Privacy Policy or the handling of client information, please contact:

Alltek Holdings Inc
PO Box 481, Palmetto, GA 30268
support@alltekholdings.com
 770-949-9468