# Confidentiality Policy

This company confidentiality policy explains how we expect organization members and participants to treat confidential information. Members and participants will receive and handle personal, private and confidential information about clients, suppliers, partners and our organization. We want to make sure that this information is well-protected.

This information must be protected for two reasons:

1. Legally binding
2. Backbone of our organization and products

## Scope

This policy affects all organization members, participants and affiliates who may have access to confidential information.

## Policy Elements

Confidential information is defined as either

* technical information, including patent, copyright, trade secret, and other proprietary information, techniques, sketches, drawings, models, inventions, know-how, processes, apparatus, equipment, algorithms, software programs, software source documents, and formula related to the current, future and proposed products and services regarding "Karaka", or
* non-technical information relating to "Karaka" products, including without limitation pricing, margins, merchandising plans and strategies, finances, financial and accounting data and information, suppliers, customers, customer lists, purchasing data, sales and marketing plans, future business plans and any other information which is proprietary and confidential to this project.

Members, participants and affiliates may have different levels of authorized access to confidential information.

## Does

* Lock or secure confidential information at all times
* Shred confidential documents when they're no longer needed
* Make sure you only view confidential information on secure devices
* Only disclose information to other members when it's necessary and authorized
* Return confidential documents before leaving or discontinuing the relationship with the organization and delete copies from personal devices.

## Don'ts

* Use confidential information for any personal benefit or profit
* Disclose confidential information to anyone outside of the organization
* Replicate confidential documents and files and store them on insecure devices

## Exceptions

Confidential information may occasionally have to be disclosed for legitimate reasons. In such cases, the holder of the confidential information should document their disclosure procedure and collect all needed authorizations from senior organization members. During this process it may be required by the receiver of the confidential information to sign a non-compete and/or non-disclosure agreement (NDA).

Disclosing more information than needed must be avoided.

## Enforcement

Disrespecting this policy possibly leads to a warning and potentially excluding the involved person from any further activities of the organization. Depending on the severeness legal actions may follow.

## Survival

This policy is binding even after separation.

2022-01-01 - Version 1.0