PERSONAL DATA PROTECTION, PROCESS AND DATA DISPOSAL POLICY