Confidentiality Procedure
PDCA and the related personnel in respective programs shall maintain confidentiality with respect to
information gathered while executing any service through maintaining the PDCA Code of Conduct and
Confidentiality Procedure. PDCA and the related personnel in respective programs shall take reasonable steps
to prevent unauthorized access to information collected during or relating to respective programs. This
includes information available on the respective platform/portal/template or other appropriate means through
access control and role definition in the respective portal. PDCA International Ltd. is committed to
protecting the privacy and confidentiality of information related to clients, auditors, staff, shareholders,
and stakeholders. This policy guides legal, standard all schemes, clients or approval, and ethical
obligations regarding privacy and confidentiality. PDCA shall retain all social compliance audit documents
in an audit database for a minimum of ten (10) years, available for review by the internal team, schemes,
vendors, retailers, client requirements, and local laws (if applicable), or any contractual agreements (if
any). Personally identifiable information shall not be disclosed.