Data Privacy & Cybersecurity Statement

Websoft Pte Limited is committed to protecting the confidentiality, integrity, and availability of all data entrusted to us. We adhere to international best practices for data protection and cybersecurity, ensuring our clients’ information is handled securely and lawfully at all times.

Data Security

We protect data using industry-standard encryption, firewalls, and secure hosting solutions.

Privacy by Design

We embed privacy and data protection principles into all services, projects, and technologies we build.

Responsible Data Use

We only collect, store, and process data necessary for legitimate business purposes and client services.

Transparency

We are open about how data is collected, used, stored, and protected, ensuring trust with all stakeholders.

Our Business & Structure

Websoft Pte Limited operates in the ICT sector across Fiji, delivering Digital Services, Development, and Consultation. We handle client information ranging from corporate websites to sensitive NGO and medical data, and apply proportionate safeguards based on risk level.

Data Protection Principles

Lawfulness & Fairness: Personal data is collected and processed lawfully, fairly, and transparently.
Purpose Limitation: Data is only used for specified, legitimate business purposes.
Data Minimisation: We limit collection to the minimum necessary information.
Accuracy: We take steps to ensure data is accurate and kept up to date.
Storage Limitation: Data is retained only as long as required by business or legal needs.
Integrity & Confidentiality: Strong security controls are applied to prevent loss, misuse, or unauthorised access.

Cybersecurity Practices

SSL/TLS encryption across all websites, applications, and communications.
Firewalls, intrusion detection, and antivirus protection on all systems.
Regular patching and updates to servers, CMS platforms, and software.
Cloudflare and WAF integration for advanced threat protection.
Secure backups, stored off-site with disaster recovery plans in place.

Employee Responsibilities

All employees undergo cybersecurity and privacy training, including secure handling of data, password management, phishing awareness, and incident response. Access to sensitive information is role-based and subject to the principle of least privilege.

Reporting Data Concerns

Concerns about data privacy or security can be reported through our contact page. We investigate all reports and respond promptly to mitigate risks and support affected stakeholders.

Measuring Effectiveness

Training Coverage: 100% of employees trained on privacy and cybersecurity annually.
Incident Response: All data incidents investigated and resolved within defined timelines.
System Testing: Regular penetration testing, audits, and vulnerability scans.
Compliance: Alignment with GDPR principles and Fiji data protection standards.