Security
Policy

Introduction

This Payment Card Data Transmission Functionalities and Security Policy (“Policy”) outlines the functionalities and security measures implemented by Suplefit to protect the transmission of payment card data on our website. Ensuring the secure transmission and processing of payment card data is of utmost importance to us, and we are committed to safeguarding this sensitive information.

1. Functionalities

1.1 Payment Processing

We offer secure payment processing functionalities to facilitate online transactions. Our website provides the following functionalities:

• Payment Card Types: We accept major credit and debit card types, including Visa, MasterCard, American Express, and others, as indicated on our website.

• Payment Gateway: We utilize a reputable and PCI DSS-compliant payment gateway to securely transmit payment card data from our website to our payment processor.

• Encryption: All payment card data transmitted between the user’s browser and our website is encrypted using industry-standard encryption protocols, ensuring the confidentiality and integrity of the data.

• Tokenization: We implement tokenization to replace sensitive payment card data with unique tokens. The actual payment card data is securely stored by our payment processor, reducing our exposure to sensitive information.

2. Security Measures

2.1 PCI DSS Compliance

We adhere to the Payment Card Industry Data Security Standard (PCI DSS) to ensure the security of payment card data transmission. Our security measures include:

• Network Security: We maintain a secure network with firewalls and intrusion detection systems to protect against unauthorized access.

• Access Control: Access to payment card data is restricted to authorized personnel only, with unique credentials and role-based access controls.

• Regular Security Testing: We conduct regular security assessments and vulnerability scans to identify and address potential weaknesses in our payment processing system.

• Data Encryption: All payment card data transmitted and stored is encrypted using strong encryption algorithms.

• Secure Development: We follow secure coding practices to prevent common vulnerabilities in our website’s payment processing code.

2.2 Incident Response

In the event of a security incident or data breach, we have an incident response plan in place to promptly identify and mitigate the issue, notify affected parties, and comply with legal and regulatory requirements.

3. Third-Party Providers

We carefully select and partner with third-party payment processors and service providers that adhere to stringent security standards and comply with PCI DSS.

4. User Education

We educate our users about safe online practices, such as using strong passwords and being cautious about phishing attempts. We also encourage users to monitor their payment card statements for any unauthorized charges.

5. Policy Review

We regularly review and update this Policy to ensure it remains aligned with evolving security standards and industry best practices.

Conclusion

We are dedicated to ensuring the secure transmission of payment card data on our website. By using our payment processing functionalities, you trust us with your sensitive information, and we take this responsibility seriously. We will continue to invest in security measures to protect your data and maintain your trust.

If you have any questions or concerns about our payment card data transmission functionalities and security measures, please contact us at info@suplefit.net