Effective Date: [Insert Date]
At ItsSecureAV, operated by TotalDigitalShieldusa LLC, we recognize the importance of protecting customer, business, and transaction information. This Information Security Policy describes the general measures we use to help protect information against unauthorized access, disclosure, alteration, misuse, or loss.
1. Purpose
The purpose of this policy is to establish security practices designed to protect information handled through our website, systems, services, and business operations.
We seek to maintain the confidentiality, integrity, and availability of information while providing our customers with a reliable and secure online shopping experience.
2. Information We Protect
Depending on the nature of your interaction with us, information we may protect includes:
- Name and contact information
- Email address
- Telephone number
- Billing and shipping information
- Order and transaction information
- Account information
- Customer service communications
- Website and technical information
- Information submitted through online forms
Payment card information may be processed through third-party payment providers. We do not intend to retain complete payment-card information when it is handled by our payment-processing providers.
3. Access Controls
Access to business systems and information is limited to authorized individuals who require access to perform their responsibilities.
Where appropriate, we use measures such as:
- Account authentication
- Access restrictions
- Unique user credentials
- Permission-based access
- Administrative controls
- Periodic review of access privileges
Access may be removed or modified when it is no longer required.
4. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, use, alteration, disclosure, or destruction.
Depending on the system and circumstances, security measures may include:
- Encryption in transit
- Secure authentication practices
- Network and system security controls
- Malware and threat protection
- Security monitoring
- Software and system updates
- Data backups
- Access logging
- Security testing and maintenance
No method of transmitting or storing information can be guaranteed to be completely secure.
5. Website Security
We take reasonable steps to maintain the security of our website and related systems. We may use security technologies and monitoring processes to identify suspicious activity, unauthorized access attempts, malicious software, and other potential threats.
Customers should also use appropriate security practices, including maintaining strong passwords and avoiding sharing account credentials.
6. Payment Security
Transactions may be processed through third-party payment processors that maintain their own security controls and policies.
Customers should review the applicable payment provider’s privacy and security practices where appropriate.
We do not request that customers send complete payment-card information through ordinary email or unsecured communications.
7. Employee and Contractor Security
Personnel and service providers who require access to business or customer information may be provided access based on their responsibilities.
Where appropriate, personnel may receive security guidance concerning:
- Protection of confidential information
- Account security
- Password protection
- Phishing and social-engineering awareness
- Appropriate handling of customer information
- Reporting suspected security incidents
8. Third-Party Service Providers
We may use trusted third-party providers to support website hosting, payment processing, shipping, communications, analytics, customer support, security, and other business functions.
Where appropriate, third-party providers may receive access to information necessary to perform their services. We expect applicable providers to maintain reasonable safeguards appropriate to the information they handle.
9. Data Retention
Information is retained for as long as reasonably necessary for legitimate business purposes, including providing services, processing transactions, maintaining business records, resolving disputes, complying with legal obligations, and protecting our rights.
Retention periods may vary depending on the type of information and applicable requirements.
10. Security Incident Response
If we become aware of a suspected security incident involving information under our control, we may take steps appropriate to the circumstances, which may include:
- Investigating the incident.
- Containing or mitigating potential harm.
- Securing affected systems.
- Assessing the information involved.
- Taking corrective measures.
- Providing notifications when required by applicable law.
Security incidents may also be reported to appropriate service providers or authorities when appropriate.
11. Customer Responsibilities
Customers can help protect their information by:
- Using strong and unique passwords
- Keeping account credentials confidential
- Keeping devices and software updated
- Using reputable security software
- Avoiding suspicious links and attachments
- Monitoring account activity
- Contacting us promptly about suspected unauthorized activity
We will never intentionally ask customers to provide passwords through an unsolicited communication.
12. Physical Security
Where applicable, reasonable physical safeguards may be used to protect systems, equipment, records, and facilities that contain or process business or customer information.
Access to restricted areas and equipment may be limited to authorized personnel.
13. Policy Review
We may periodically review and update our information-security practices to address changes in technology, business operations, security threats, and applicable requirements.
This policy may be updated from time to time. The revised version will be posted on our website with an updated effective date.
14. No Absolute Security Guarantee
Although we use reasonable measures designed to protect information, no website, network, electronic transmission, storage system, or security measure can guarantee complete security.
Customers should understand that information transmitted over the internet may be exposed to risks beyond our reasonable control.
15. Contact Us
If you believe you have identified a security issue involving our website or services, please contact us promptly.
ItsSecureAV
Operated by: TotalDigitalShieldusa LLC
Address: 30 North Gould Street, Suite R, Sheridan, WY 82801, United States
Email: customer@itssecureav.com
Phone: 1 857-273-9955
Please do not send passwords, complete payment-card numbers, or other highly sensitive information through ordinary email.