Privacy Policy

1. Purpose

Book Value Consulting is committed to protecting the confidentiality, integrity, and availability of the information it manages, including financial, accounting, and personal data. This policy establishes the security principles for the firm.

2. Scope

This policy covers client financial and tax information, personal data collected through our website, job applicant materials, internal business information, and all firm devices and systems.

3. Information Classification

• Confidential: financial statements, tax records, accounting documents, client identification, contracts and business data.
• Personal Data: names, emails, contact details, resumes and employment information.
• Public Information: website content.

4. Technical Security Measures

We implement updated antivirus software on all workstations, firewall protection, password-protected systems, restricted server access, secure email handling, and protected internal storage.

5. Organizational Measures

• Access to confidential information is limited to authorized personnel.
• Corporate accounts are required for client communications.
• Credentials are personal and may not be shared.
• Confidentiality obligations apply to all staff.

6. Access Control

Access is granted based on business necessity. All access credentials must be kept confidential, are individual and non-transferable, and should be periodically updated.

7. Data Retention

• Client information is retained according to the professional relationship and applicable legal requirements.
• Resumes are kept for 24 months unless deletion is requested.
• Contact form submissions are retained only as long as necessary.

8. Incident Management

In the event of a security incident, we assess its scope, isolate affected systems, implement corrective measures, and notify affected parties when legally required.

9. Legal and Regulatory Compliance

We operate in accordance with Argentina's Personal Data Protection Law No. 25,326, applicable tax and professional regulations, and international data protection principles.

10. Policy Review

This policy is reviewed periodically and updated to reflect technological, operational, or regulatory changes.