Incident Response & Data Security Policy

Your Data, Our Responsibility

Organization Name: Morecliq Agency
Effective Date: 1st January 2026
Last Reviewed: 1st January 2026

1. Purpose

This policy defines Morecliq’s approach to protecting sensitive business and client data, including Amazon-related data, and outlines the steps to identify, respond to, report, and prevent security incidents.

2. Scope

This policy applies to:

- - All employees, contractors, and authorized personnel
  - All systems, devices, and platforms used to access Amazon Seller or Partner data
  - All client data, credentials, reports, and campaign information

3. Data Security Controls

Morecliq Agency follows basic but effective security practices, including:

- - Restricted access to systems on a need-to-know basis
  - Strong passwords and two-factor authentication where available
  - Secure storage of credentials using password managers
  - Regular software updates and security patches
  - Limited access to Amazon data only for authorized team members

4. Incident Detection & Monitoring

Security incidents may include:

- - Unauthorized access to accounts or databases
  - Credential compromise
  - Data leaks or accidental data exposure
  - Malware or suspicious system activity

Detection methods include:

- - Monitoring login alerts and unusual access patterns
  - Review of system and platform notifications
  - Manual checks of account activity

5. Incident Response Process

In the event of a suspected or confirmed security incident, the following steps are taken:

1. Identification – Detect and confirm the incident
2. Containment – Isolate affected systems and revoke compromised access
3. Assessment – Identify impacted data and scope of the incident
4. Remediation – Apply fixes, reset credentials, and patch vulnerabilities
5. Recovery – Restore systems from secure backups if required
6. Documentation – Record the incident details and corrective actions

6. Amazon Notification & Reporting

- - Any security incident involving Amazon data is reported to security@amazon.com
  - Notification is made within 24 hours of detection or sooner if required
  - Ongoing updates are shared with Amazon until resolution

7. Organizational Change Notification

Morecliq Agency will notify Amazon within 30 days of any material organizational changes, including:

- - Ownership or legal entity changes
  - Key personnel or security responsibility changes
  - Major infrastructure or data handling changes

8. Preventive Measures & Review

- - Regular review of access permissions
  - Periodic security awareness for team members
  - Annual review of this policy or earlier if required
  - Continuous improvement based on incident learnings