Data Handling and Security Standards

Last Updated on July 5, 2026

Welcome to Marketeq Digital Inc. (hereinafter referred to as "Marketeq," "we," "us," or "our"). This Data Handling and Security Standards document (the "Standards") describes the standards that Marketeq applies to the handling and protection of data across its operations. These Standards are intended to ensure that data is handled consistently, securely, and in accordance with applicable law. This document supplements our Data Encryption and Security Policy, Data Retention Policy, and Information Governance and Management Policy. If you have any questions regarding these Standards, you may contact us at legal@marketeqdigital.com.

1. Purpose and Scope

The purpose of these Standards is to establish consistent requirements for the handling and protection of data by Marketeq. These Standards apply to all data handled by Marketeq, including client data, personal data, and business information, regardless of its format or medium. They apply to all personnel and, where relevant, to third parties who handle data on our behalf. These Standards reflect our commitment to protecting the data entrusted to us. They form part of our broader data governance and security framework.

2. Data Classification

Marketeq handles data according to its sensitivity and importance. We seek to classify data appropriately so that protective measures can be applied commensurate with the associated risks. More sensitive data, such as personal data or confidential client information, is subject to enhanced safeguards. Classifying data supports the consistent and appropriate application of security measures. Understanding the nature of data is the foundation of handling it appropriately.

3. Access and Authorization

Access to data is granted based on legitimate need and in accordance with the principle of least privilege. We implement authentication and authorization controls to ensure that data is accessible only to those with a legitimate need. Access rights are reviewed periodically and revoked when no longer required. We maintain records of access to sensitive data where appropriate. Controlling access is a core element of protecting data.

4. Secure Handling Practices

Personnel are expected to handle data securely in accordance with these Standards and our related policies. This includes protecting data against unauthorized disclosure, using approved systems and tools, and following secure practices when storing, transmitting, or disposing of data. Personnel must not use, share, or store data in a manner that circumvents our security controls. Secure handling practices apply throughout the data lifecycle. Consistent handling practices help to protect data against loss or misuse.

5. Data Transmission and Storage

Data is transmitted and stored using appropriate safeguards designed to protect its confidentiality and integrity. Where appropriate, data is encrypted in transit and at rest, as described in our Data Encryption and Security Policy. Data is stored using approved systems that are subject to appropriate security measures. We take reasonable steps to protect data against unauthorized access during transmission and storage. Secure transmission and storage are essential to protecting data.

6. Data Minimization and Retention

Marketeq seeks to handle only the data that is necessary for legitimate purposes and to retain it only for as long as necessary. We apply the principle of data minimization to reduce the amount of data at risk. When data is no longer required, it is disposed of securely in accordance with our Data Retention Policy. Limiting the data we hold reduces risk and supports compliance. Data minimization and appropriate retention are important elements of these Standards.

7. Incident Handling

Personnel are expected to promptly report any actual or suspected data security incident in accordance with our procedures. Marketeq maintains processes for responding to data incidents, including containment, assessment, and remediation, as described in our Data Encryption and Security Policy. Prompt reporting and response help to limit the impact of incidents. Where an incident gives rise to notification obligations, we seek to comply with applicable requirements. Effective incident handling is a key element of protecting data.

8. Responsibilities and Compliance

All personnel are responsible for handling data in accordance with these Standards and for reporting concerns where necessary. Those with specific responsibilities for data security oversee the implementation of these Standards. Third parties who handle data on our behalf are expected to meet standards consistent with these Standards. Failure to comply with these Standards may result in disciplinary or other appropriate action. Shared responsibility supports the effective protection of data.

9. Changes to These Standards

Marketeq reserves the right to modify or update these Data Handling and Security Standards at any time to reflect changes in our practices, technology, or legal requirements. Any changes will become effective upon posting the revised Standards, and we encourage you to review them periodically. Where changes are material, we will endeavor to communicate them through appropriate means.

10. Contact Information

If you have any questions, concerns, or wish to report a data security concern, please contact us at legal@marketeqdigital.com. We are committed to handling data securely and to addressing your inquiries promptly and professionally.