Information Security Policy

Information Security Policy

Last Reviewed: 24 October 2025

1. Introduction

At SysNet Cleaner, we are committed to protecting the confidentiality, integrity, and availability of the information we collect, process, and store. This Information Security Policy defines the standards, responsibilities, and practices that govern how we safeguard information, whether collected through our website or software. This policy applies to all employees, contractors, partners, and systems that interact with SysNet Cleaner’s systems, services, and data.

The purpose of this policy is to ensure that all information entrusted to SysNet Cleaner is handled securely and in accordance with applicable laws and industry best practices.

2. Scope

This policy applies to all information assets owned, managed, or processed by SysNet Cleaner, including but not limited to:

This policy applies to all employees, contractors, and third-party partners with access to SysNet Cleaner information systems.

3. Information Security Governance

SysNet Cleaner maintains accountability for information security through defined leadership and governance structures. Management regularly reviews and updates this policy and related procedures to meet evolving threats, technologies, and legal requirements.

4. Risk Management and Classification

SysNet Cleaner classifies data based on sensitivity and business importance. Sensitive information (such as personal contact data or telemetry tied to an identifiable user) receives a higher level of protection. Data is classified and handled according to its level, ensuring appropriate safeguards are in place.

5. Access Control

Access to SysNet Cleaner systems and information is granted only on a need-to-know basis. Unique user access credentials are used, and elevated permissions are restricted according to role and responsibility. Authentication measures are required for access to internal systems or data.

6. Physical and Environmental Security

Access to physical facilities or servers where sensitive information may be stored is restricted to authorised personnel. Appropriate physical controls are enforced to prevent unauthorised entry, theft, or damage.

(Note: SysNet’s publicly available content does not detail physical security controls. If the company maintains on-site infrastructure or data centres, this section should be expanded accordingly.)

7. Network and System Security

SysNet Cleaner implements secure network configurations to mitigate unauthorised access and intrusion attempts. This includes:

Software and security updates are applied regularly to address vulnerabilities and reduce risk.

8. Data Protection and Encryption

SysNet Cleaner deploys protective measures to safeguard user information both in transit and at rest. Data transmission between client devices and SysNet servers uses encryption standards to prevent interception.

Where applicable, encryption is used to protect backups and stored data.

9. Incident Management

SysNet Cleaner maintains procedures to identify, report, and respond to information security incidents. All employees and authorised users are required to report suspected breaches or vulnerabilities immediately to the designated security team.

(Note: SysNet’s online content does not currently describe a formal incident response process. If you have internal procedures, they can be integrated here.)

10. Third-Party Relationships

SysNet Cleaner may engage third-party partners for services such as payment processing or analytics. These partners are required to comply with contractual confidentiality and data protection obligations. Limited information may be shared only to fulfil service delivery requirements.

11. Data Retention and Disposal

SysNet Cleaner retains data only as long as necessary to achieve the purposes outlined in our Privacy Policy, to meet contractual obligations, or to comply with legal requirements. When data is no longer required, it is either securely deleted or anonymised.

12. User Privacy and Rights

SysNet Cleaner respects individual rights regarding personal data. Users have the right to:

Details of these rights and how to exercise them are provided in the Privacy Policy.

13. Training and Awareness

All authorised personnel with access to SysNet Cleaner systems undergo regular security awareness training. Training covers secure handling of information, recognition of potential threats, and reporting procedures. (If training exists.)

14. Monitoring and Review

SysNet Cleaner regularly monitors compliance with this policy and assesses evolving security risks. The policy is reviewed periodically and updated when new security standards or technologies emerge.

15. Enforcement

Violation of this policy by employees, contractors, or partners may result in disciplinary action, up to and including termination of access or legal action.

16. Policy Updates

SysNet Cleaner may update this Information Security Policy from time to time to reflect changes in legal, technical, or operational requirements. Updated versions will be published on our website, and continued use of our services constitutes acceptance of those changes.

17. Contact Information

Notes on Coverage

Physical Security & Incident Response
SysNet’s current public documentation does not explicitly cover detailed physical security controls or a structured incident response process. These sections are included in the template for completeness and should be refined once internal procedures exist.

Governance and Training
The reference site places strong emphasis on employee responsibilities and formal training. If SysNet has such programs, they should be documented and referenced.

Scope of Third-Party Security
The reference site covers PCI DSS and external audit details that are not relevant to SysNet Cleaner’s current scope and product. Those have been omitted, and the relevant partner security obligations have been simplified.