1. Purpose

Book Value Consulting is committed to protecting the confidentiality, integrity, and availability of the information it manages, including financial, accounting, and personal data of clients, candidates, and business contacts.

This policy establishes the security principles and safeguards applied within the firm.

2. Scope

This policy applies to:

• Client financial and tax information
   

• Personal data collected through the website
   

• Job applicant resumes and related information
   

• Internal business information
   

• All devices and systems used by the firm
   

3. Information Classification

Information managed by Book Value Consulting is classified as follows:

Confidential Information
Financial statements, tax records, accounting documentation, client identifiers (CUIT, tax IDs), contracts, and internal business data.

Personal Data
Names, company names, email addresses, contact details, resumes, and employment-related information.

Public Information
Content published on the firm’s website.

4. Technical Security Measures

Book Value Consulting implements reasonable and proportionate security measures appropriate to the size and nature of the firm, including:

• Updated antivirus software on all workstations
   

• Active operating system firewall protection
   

• Password-protected systems and accounts
   

• Restricted access to internal servers
   

• Secure handling of client email communications
   

• Storage of resumes and internal documentation on protected internal servers
   

5. Organizational Measures

• Access to confidential information is limited to authorized personnel only
   

• Corporate accounts must be used for client communications
   

• Credentials are personal and may not be shared
   

• Confidentiality obligations apply to all personnel
   

6. Access Control

Access to sensitive information is granted based on business necessity.

All access credentials:

• Must be kept confidential
   

• Are individual and non-transferable
   

• Should be periodically updated
   

7. Data Retention

• Client information is retained for the duration of the professional relationship and as required by applicable tax and legal regulations.
   

• Resumes are retained for up to 24 months unless deletion is requested.
   

• Website contact form submissions are retained only as long as necessary to respond to inquiries.
   

8. Incident Management

In the event of a security incident (unauthorized access, malware, data breach, or loss of information):

1. The scope of the incident will be assessed.
    

2. Affected systems will be isolated when necessary.
    

3. Corrective measures will be implemented.
    

4. Affected parties will be notified when legally required.
    

9. Legal and Regulatory Compliance

Book Value Consulting operates in accordance with:

• Argentina Personal Data Protection Law No. 25,326
   

• Applicable tax and professional regulations
   

• Generally recognized international data protection principles
   

10. Policy Review

This policy will be reviewed periodically and updated when technological, operational, or regulatory changes occur.