Worldlink Travel & Tours Tanzania Limited is committed to protecting the confidentiality, integrity, and availability of all physical and digital information assets. This Information Security Policy outlines the framework and practices we follow to safeguard client data, employee records, and company systems.

1. Purpose

The purpose of this policy is to ensure all information assets are protected from internal and external threats, whether deliberate or accidental. This policy applies to all employees, contractors, and third-party service providers.

2. Scope

This policy covers all information systems, networks, data storage, devices, software applications, and communication tools used or managed by Worldlink Travel & Tours Tanzania Limited.

3. Responsibilities

• Management is responsible for ensuring policies are implemented and followed.
• Employees must understand and comply with security practices.
• IT personnel are responsible for maintaining technical safeguards and monitoring systems.
• Third-party vendors must adhere to our security standards when handling sensitive data.

4. Data Protection

• Client data (names, contact info, booking history, etc.) must be stored securely.
• Access to personal data is limited to authorized personnel only.
• Data must be encrypted when transmitted over external networks.
• Regular backups must be maintained and tested.

5. Password & Access Management

• Employees must use strong passwords and change them regularly.
• User access rights must be based on job roles and reviewed periodically.
• Shared accounts and passwords are strictly prohibited.
• Remote access must be controlled and secured using VPN or encrypted protocols.

6. Email & Internet Use

• Company email must be used responsibly and only for business purposes.
• Employees must avoid opening suspicious attachments or links.
• Personal use of the internet should not compromise security or bandwidth.
• Downloading unauthorized software is strictly forbidden.

7. Device Security

• Company devices must be protected with passwords, biometric authentication, or PINs.
• All mobile and portable devices must have encryption enabled.
• Lost or stolen devices must be reported immediately to the IT department.

8. Incident Reporting

All security breaches, suspicious behavior, or data loss incidents must be reported to management or the IT department immediately. An investigation will be conducted, and corrective actions will be taken.

9. Training & Awareness

All staff will receive basic training on cybersecurity awareness and best practices. Regular updates and refresher courses will be conducted to ensure compliance with evolving threats.

10. Policy Enforcement

Any employee or contractor found violating this policy may face disciplinary action, including suspension or termination. Criminal activities will be reported to the appropriate authorities.

11. Review & Updates

This policy will be reviewed annually or when significant changes to technology or business practices occur.

12. Point of Contact for Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact:

Yasir Dewji
Worldlink Travel & Tours Tanzania Limited
P.O. Box 76394
Dar es Salaam, Tanzania
Email: yasir.dewji@wlafrica.com
Phone: +255 682 777 555

We are committed to responding to your inquiries promptly and in accordance with applicable data protection laws.