Data Security Policy

1. Confidentiality Agreements

Every client engagement begins with a formal Non-Disclosure Agreement (NDA). All employees are also bound by confidentiality agreements that continue even after employment or client engagement ends.

2. Secure Data Transfer

Client information is transferred only through secure encrypted channels including encrypted cloud storage, secure client portals, and trusted accounting platforms. Sensitive financial information is never shared through unsecured methods.

3. Access Control

Access to client information is restricted only to authorised team members assigned to the project. Role-based permissions ensure every individual has access only to the information necessary for their responsibilities.

4. Platform & Software Security

We work exclusively with industry-leading accounting software including Xero, QuickBooks Online, Sage, MYOB, FreeAgent and similar platforms. Two-factor authentication, strong password policies, and enterprise-grade encryption are mandatory across all systems.

5. Team Security Practices

Every member of our team receives regular security and confidentiality training. Company devices are password protected, encrypted, and regularly monitored. Client information is never stored on personal devices.

6. Physical Security

Our office premises maintain controlled physical access. Confidential documents are securely stored and securely destroyed when no longer required.

7. Data Retention & Disposal

Client records are retained only for the duration required by contractual and legal obligations. Once no longer required, digital records are securely deleted and physical documents are securely shredded.

8. Data Breach Response

In the unlikely event of a security incident, we investigate immediately, notify affected clients where legally required, implement corrective measures, and maintain full transparency throughout the process.

9. International Data Handling

As an India-based accounting firm serving clients across the United Kingdom, United States, Australia and other countries, we apply internationally recognised safeguards and comply with applicable data protection regulations for cross-border data transfers.

10. Our Security Commitment

We continually review and strengthen our security controls to ensure client information remains protected. Every client's data is treated with the same care and confidentiality we expect for our own business.

11. Contact Us

If you have any questions regarding our Data Security Policy or would like additional information about our security practices, please contact us at info@thenovara.in.