Both parties agree to comply with all applicable laws and regulations on the protection and maintenance of strict confidentiality in respect of all information and data of employees, customers and third parties that each party may have access to, including compliance with the Personal Data Protection Act No 09 of 2022, the EU Data Protection Regulation to the extent applicable as well as all other applicable data protection legislation of other jurisdictions which are in force or may come into force from time to time (the “Data Protection Legislation”). This shall include obligations to ensure the confidentiality, security of Personal Data and the implementation of adequate organizational, technical and security measures to ensure protection is afforded to Personal Data (until its return to Data Subject, erasure or anonymization/pseudonymization) against intentional or accidental data breaches, loss, damage, destruction, alteration, disclosure, transfer, transmission, processing or similar incident.
The personal data provided at the time of registration shall be retained by the Company for the duration of the service relationship. Upon termination or discontinuation of the service, the personal data provided shall be securely disposed of by the Company after a period of six (6) years, unless required for ongoing legal or regulatory purposes.

It is the responsibility of the Supplier to ensure that the personal data provided at the time of registration remains accurate and up to date. Any changes, corrections, or updates to the submitted personally identifiable information (PII) must be promptly communicated to the Company. The Company shall not be liable for any issues arising due to outdated or incorrect information provided by the supplier.