Security Policy
At Aquassi Ltd, the security of your personal information and transactions is our top priority. We use the latest technologies and protocols to safeguard your data and ensure that your shopping experience is safe and secure. This Security Policy outlines the measures we take to protect your information and how we work to prevent unauthorized access or misuse of your personal data.
1. Data Encryption
To protect your sensitive information, we use SSL (Secure Socket Layer) encryption on all pages of our website that collect or transmit personal or financial information. SSL encryption ensures that any data you share with us, such as payment details or personal information, is encrypted and transmitted securely over the internet.
- How SSL Works: SSL encryption uses a cryptographic system to encrypt data, ensuring that only authorized parties (such as our secure servers) can access the transmitted information.
- Indicators: You can identify SSL-protected pages by looking for a padlock icon in your browser’s address bar and ensuring the URL begins with “https://” (the “s” stands for secure).
2. Payment Security
We partner with trusted and secure payment processors to handle all financial transactions. When making a purchase on our website, your payment details are processed by reputable third-party providers, such as PayPal, Stripe, or other PCI-compliant services, that use advanced encryption and fraud detection systems to protect your data.
- PCI DSS Compliance: Our payment processors comply with Payment Card Industry Data Security Standards (PCI DSS), which provide strict guidelines for securely processing and storing credit card information.
We do not store sensitive payment details, such as credit card numbers, on our servers. Once your payment has been processed, your card information is immediately discarded or encrypted, reducing the risk of unauthorized access.
3. Two-Factor Authentication (2FA)
To enhance account security, Aquassi Ltd encourages customers to enable Two-Factor Authentication (2FA) for their accounts. This added layer of security ensures that even if someone gains access to your password, they will not be able to log in without the second authentication step.
- How 2FA Works: When logging in, you’ll be prompted to enter a code sent to your mobile device or email, providing an extra layer of verification before you can access your account.
4. Secure Account Management
- Strong Passwords: We recommend that you create a strong and unique password for your Aquassi Ltd account. A strong password should include a combination of uppercase and lowercase letters, numbers, and special characters.
- Password Protection: If you believe your account information has been compromised, please contact us immediately at support@aquassi.co.uk. You can also change your password by logging into your account and updating it under your account settings.
- Automatic Logout: To prevent unauthorized access, we automatically log users out of their accounts after a certain period of inactivity.
5. Secure Website Architecture
Our website is hosted on a secure server that is constantly monitored for potential vulnerabilities. We regularly perform security audits and updates to ensure that our site is protected from potential cyberattacks, malware, and unauthorized access.
- Firewalls: Our website is protected by firewalls that monitor incoming and outgoing traffic, filtering out any suspicious or malicious activity.
- Regular Updates: We apply regular updates and patches to our server infrastructure and website software to protect against known vulnerabilities.
6. Data Protection and Privacy
We are committed to ensuring that your personal information is kept safe and private. Our Privacy Policy outlines how we collect, store, and use your data, and we adhere to all relevant data protection laws, including the General Data Protection Regulation (GDPR) for customers in the European Union.
- Data Minimization: We collect only the data that is necessary to process your orders and provide our services. We do not collect excessive or unnecessary personal information.
- Access Control: Access to your personal information is restricted to authorized personnel only. We take strict measures to prevent unauthorized access to your data.
7. Monitoring and Fraud Detection
To further protect you, we use advanced fraud detection tools and technologies to monitor our website for any unusual or suspicious activity. This includes monitoring for:
- Suspicious Transactions: We track order patterns and payment details to identify potential fraudulent activity. If we detect any issues, we may contact you for further verification or hold an order for review.
- Account Activity: We monitor login attempts and other user account activity for unusual or unauthorized access.
8. Data Retention and Disposal
We retain customer data only as long as necessary for the purposes outlined in our Privacy Policy and to comply with legal or business obligations. Once this period has passed, we securely delete or anonymize any personal information to prevent unauthorized access.
- Payment Data: As mentioned, we do not store sensitive payment data on our servers. Payment information is processed through third-party providers who comply with security standards for storing such data.
9. Third-Party Services
While we take every step to protect your information, we do rely on third-party service providers (such as payment processors, shipping companies, and hosting services) to help us fulfill orders and provide services. These third parties are bound by strict contractual agreements to protect your data, and they are required to implement industry-standard security measures to safeguard your information.
10. Reporting Security Vulnerabilities
If you notice any potential security issues with our website or suspect a vulnerability, please report it immediately to our security team. We appreciate any efforts to keep our site secure.
- Email: security@aquassi.co.uk
11. Limitation of Liability
While we take extensive measures to secure your data and ensure the safety of our website, no system is 100% secure. Aquassi Ltd cannot guarantee absolute security against cyberattacks or data breaches, and we are not liable for any loss or damage resulting from unauthorized access, cyberattacks, or data breaches.