GAC Solutions – Privacy Policy (Internal System)

Effective Date: 11/1/2025

1. Purpose

This Privacy Policy describes how GAC Solutions (“the Company”) collects, stores, and protects information within the Onboardings Management System (“the System”). The System is for internal company use only and supports onboarding, compliance, and audit processes for GAC consultants, employees, and partners.

2. Scope

This policy applies to all users of the System, including employees, consultants, and authorized staff with system access under GAC’s internal network or company domain.

3. Data Collected
  • Consultant and employee personal information (name, contact, identification, and tax documents such as W-9, W-2, etc.)
  • Employment, assignment, and onboarding data.
  • Uploaded documents necessary for HR, legal, or compliance verification.
  • Access and activity logs (including IP, timestamps, actions performed).
4. Purpose of Data Collection

All data collected is used exclusively for internal company operations, including verifying compliance, supporting audits, tax reporting, and payroll documentation.

No data is shared externally or sold. Disclosure is only made if required by law, court order, or government authority with valid jurisdiction.

5. Access & Confidentiality
  • Access is restricted to authorized GAC personnel.
  • All activities are logged and periodically reviewed.
  • Unauthorized access, copying, or sharing is strictly prohibited and may result in disciplinary or legal action.
  • Users are responsible for maintaining confidentiality of their credentials.
6. Data Retention & Deletion

Onboarding and compliance records are retained per legal retention requirements (typically 3–7 years). Audit logs are stored for 1 year. After the retention period, data is securely deleted or anonymized.

7. Security
  • All access is over HTTPS (encrypted in transit).
  • Data is stored on encrypted drives and databases.
  • Session activity is logged for monitoring.
  • Backups are encrypted and maintained per disaster recovery policy.
8. Employee Rights
  • Request correction of incorrect information.
  • Request a copy of their onboarding data (subject to verification).
  • Contact HR or Compliance for privacy-related inquiries.
9. Breach Reporting

In case of suspected or actual data leak, immediately inform the IT Security and HR Compliance departments. GAC Solutions will initiate an internal audit and take legal action if required.

10. Contact

GAC Solutions – Compliance & Data Protection Office
📧 contracts@gacsol.com
🏢 Corporate Office: 1900 E. Golf Road, Suite 925, Schaumburg, IL – 60173.