ISMS POLICY

Introduction

Welcome to Haatak! We are GrowYuga Fintech Private Limited, located at #558, 2nd Floor, 3rd Phase, JP Nagar, Bengaluru - 560078. We are committed to safeguarding your information with the utmost care and transparency.

Our Information Security Management System (ISMS) policy outlines how we protect the confidentiality, integrity, and availability of all information systems, processing facilities and assets related to our digital services. This includes everything involved in designing, developing, and supporting our digital mobile and web applications. By using our website, mobile applications, or other services, you agree to the terms of this policy. We may update this policy from time to time, so please review it periodically to stay informed about how we manage and secure your information.

Your trust is important to us, and we are dedicated to ensuring the highest standards of information security.

We are committed to:

1. Risk Management: Identifying, assessing, and managing risks that could impact our customers, operations, and critical infrastructure. We will implement appropriate information security controls as part of our risk management process.

2. Security Awareness: Providing information security training to all employees and fostering a strong security culture through ongoing learning and development programs.

3. Policy Development: Creating and enforcing clear objectives, policies, procedures, and processes to support our ISMS. We define roles and responsibilities to ensure effective security management

4. Partnerships Collaborating with customers, partners, and suppliers to build trust and ensure that all parties, including employees, vendors, and third-party contractors, adhere to our security policies and standards.

5. Legal Compliance: Complying with relevant laws, policies, standards, and regulations related to information security management.

6. Continuous Improvement: Regularly reviewing and improving our ISMS objectives and processes to ensure ongoing effectiveness and adaptation to new challenges.

7. Incident Response and Recovery: Promptly address any information security incidents or breaches. We have established a detailed incident response plan to manage and mitigate potential threats. In the event of a security incident, we will notify affected parties as soon as possible and take all necessary steps to recover and secure the impacted data.

8. Regular Audits and Assessments: Conduct regular internal and external audits of our information security practices to ensure compliance with our policies and industry standards. These audits help us identify potential vulnerabilities and improve our security measures continuously. We are dedicated to maintaining transparency and accountability in our security practices.

9. Data Encryption and Secure Communication: Employ advanced encryption technologies to protect sensitive data both in transit and at rest. Our secure communication channels ensure that all interactions and transactions on our platform are encrypted and protected from unauthorized access.

10. Third-Party Security Management Requires all third-party vendors and partners comply with our information security standards. We perform thorough security assessments of our third-party partners to ensure they adhere to the same high standards of data protection and security that we uphold.