Purpose

The purpose of this policy is to establish the security principles and practices followed by Farooq Shafi Digitals to protect:

• Client information
• Company systems
• Digital assets
• Marketing platforms
• Websites
• Advertising accounts
• Business communications

Scope

This policy applies to:

• Employees
• Contractors
• Freelancers
• Consultants
• Third party service providers with authorized access
• All systems, devices, software, and cloud services used by Farooq Shafi Digitals

Information Security Principles

Our cybersecurity framework is based on three core principles:

Confidentiality

Protecting sensitive client and business information from unauthorized access.

Integrity

Ensuring that information remains accurate, complete, and protected from unauthorized modification.

Availability

Maintaining reliable access to systems, services, and data when required.

Security Measures

To help protect our systems and client information, we implement security measures including:

• Multi Factor Authentication (MFA) on supported platforms
• Strong password management practices
• Role based access controls
• Secure cloud storage
• Device encryption where supported
• Firewall protection
• Anti malware and endpoint protection
• Regular software and security updates
• Secure HTTPS encrypted websites
• Secure backups of critical business data
• Continuous monitoring of critical systems

Client Data Protection

Client information is handled with strict confidentiality.

We take reasonable measures to protect:

• Marketing data
• Campaign information
• Customer lists
• Advertising accounts
• Analytics
• Business documents
• Financial information shared during projects

Access is limited to authorized personnel who require the information to perform their responsibilities.

Access Management

Access to business systems is granted based on business necessity.

Security practices include:

• Unique user accounts
• Least privilege access
• Immediate removal of unnecessary access
• Secure credential management
• Periodic review of permissions

Password Policy

We encourage the use of strong passwords that include:

• Uppercase and lowercase letters
• Numbers
• Special characters
• Minimum recommended length of 12 characters

Passwords should never be shared or reused across multiple business platforms.

Where available, Multi Factor Authentication should always be enabled.

Remote Work Security

Employees and contractors accessing company systems remotely are expected to:

• Use secure internet connections
• Keep devices updated
• Protect devices with passwords or biometric authentication
• Avoid using unsecured public WiFi without appropriate protection
• Report lost or stolen devices immediately

Third Party Platforms

Our services may utilize third party platforms including:

• Google
• Meta
• Microsoft
• LinkedIn
• TikTok
• Shopify
• HubSpot
• WordPress
• Stripe
• Cloudflare
• Hosting providers
• CRM platforms

While we implement reasonable security practices, each third party platform maintains its own security policies and infrastructure.

Incident Response

If a suspected cybersecurity incident occurs, we aim to:

1. Identify the issue
2. Contain potential threats
3. Assess the impact
4. Restore affected systems
5. Notify affected clients when appropriate and required by law
6. Implement corrective actions to reduce future risk

Data Backups

Critical business information is backed up using secure cloud services where appropriate.

Backup procedures are designed to support business continuity in the event of accidental loss or system failure.

Software Updates

We regularly apply updates and security patches to supported systems and software to reduce known vulnerabilities.

Employee Awareness

Personnel are encouraged to follow cybersecurity best practices, including:

• Recognizing phishing attempts
• Protecting login credentials
• Using approved software
• Reporting suspicious activity promptly

Acceptable Use

Company systems may only be used for authorized business purposes.

Users must not:

• Attempt unauthorized access to systems
• Install unauthorized software
• Share confidential client information without authorization
• Engage in activities that compromise security

Limitation of Liability

While Farooq Shafi Digitals maintains commercially reasonable security measures, no internet based system or technology can be guaranteed to be completely secure.

Accordingly, we cannot guarantee absolute protection against:

• Cyber attacks
• Data breaches
• Distributed denial of service (DDoS) attacks
• Malware
• Phishing
• Ransomware
• Third party platform compromises
• Internet outages
• Other unforeseen security events

To the fullest extent permitted by applicable law, Farooq Shafi Digitals shall not be liable for indirect, incidental, consequential, or special damages arising from cybersecurity incidents beyond our reasonable control.

Continuous Improvement

Cybersecurity threats continue to evolve. We periodically review and improve our security practices to strengthen the protection of our systems, clients, and business operations.

Policy Updates

This Cyber Security Policy may be updated from time to time to reflect changes in technology, business operations, or applicable legal and regulatory requirements.

The latest version will always be available on our website.

Contact Us

For questions regarding this Cyber Security Policy or our information security practices, please contact:

Farooq Shafi Digitals

Website: www.farooqshafi.com

Email: hello@farooqshafi.com