Effective Date: January 1, 2025
1. Purpose
This policy outlines how we handle and protect information related to Two-Factor Authentication (2FA) messages sent to internal staff. These messages are used solely to enhance security by verifying staff identities when accessing company systems.
2. Information Collected
We collect and process the following information for 2FA purposes:
- Employee phone numbers or email addresses (as registered for authentication)
- One-time passcodes (OTPs) generated for authentication
- Timestamps of authentication attempts
3. Use of Information
The collected information is used exclusively for authentication and security purposes. It will not be shared, sold, or used for any other purpose beyond access verification.
4. Data Storage and Security
- 2FA messages are transmitted securely and are not stored beyond the necessary time for authentication.
- Access to authentication logs is restricted to authorized personnel.
- Encryption and security best practices are applied to protect all 2FA-related data.
5. Third-Party Services
If a third-party service provider is used for 2FA messaging, we ensure they comply with relevant data protection and security standards.
We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages
All of the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
6. Employee Rights
Employees can request to update or remove their registered authentication method, subject to security requirements.
7. Policy Updates
This policy may be updated periodically. Employees will be notified of any significant changes.
For questions, contact Heather Lukes through the company Slack.