Toner Dampproofing Supplies Ltd (UK) Online Security Policy
1.0 - Secure Transactions on tonerdampproofingsupplies.co.uk
1.1 – At Toner Dampproofing Supplies Ltd (UK), we prioritise your security and peace of mind during online transactions. We are committed to ensuring a safe and secure shopping experience on our website.
2.0 - Advanced Security Technology
2.1 – Our website uses Secure Sockets Layer (SSL) technology, establishing a secure connection to keep your payment card information confidential and safe during the online ordering process.
2.2 – We store all personal and payment information in compliance with GDPR and relevant data protection regulations, ensuring that only authorised personnel have access to your data.
2.3 – We partner with Cloudflare, a leading web security provider, to protect our website from malicious attacks such as DDoS (Distributed Denial of Service). Cloudflare’s network-level security provides a strong, reliable layer of defense, ensuring our website remains operational and secure at all times.
2.4 – Our team continuously monitors our systems for potential threats and applies the latest security updates and patches to maintain security integrity and prevent vulnerabilities.
3.0 - Fraud Prevention Measures
3.1 – Every transaction is analysed by our robust fraud control systems, verifying the authenticity of payment cards and checking for signs of fraudulent activity to provide an extra layer of security.
4.0 - Safe Ordering Process
4.1 – When placing an order, your browser switches to secure mode, meaning all data, including your order, personal, and payment details, is encrypted and securely transmitted to our server.
4.2 – Our system only allows order placement in secure mode, adding an additional layer of protection. Once your order is complete, you exit secure mode.
5.0 - Communication Protocols
5.1 – We strongly advise against sharing payment card details through unsecured channels, such as email. Toner Dampproofing Supplies Ltd (UK) cannot assume responsibility for losses during email transmission, as it falls outside our secure platform.
5.2 – For security concerns or assistance, please reach out to our Security Team at [email protected].
6.0 - Account Security Options (for Registered Users)
6.1 – We offer two-factor authentication (2FA) to add an extra layer of security for your account, requiring both a password and a second verification step.
6.2 – Registered users can opt-in for account activity notifications, keeping you informed and in control of your account security.
7.0 - Independent Security Audits
7.1 – We conduct regular, independent security audits of our website and systems, performed by certified cybersecurity professionals to ensure that our security protocols meet the highest industry standards.
8.0 - Your Trust, Our Commitment
8.1 – At Toner Dampproofing Supplies Ltd (UK), we are continually updating and refining our security measures to provide you with a safe, reliable, and worry-free shopping experience.
8.2 – We have a five-year partnership with a local website design and development company dedicated to continuously improving our website’s functionality and security. This ongoing collaboration allows us to swiftly implement enhancements and security updates to meet evolving standards.
9.0 - Data Retention and Disposal Policy
9.1 – We retain customer data only for as long as necessary to fulfil the purposes outlined in this policy and as required by applicable law. This ensures compliance with GDPR’s data minimisation principles while maintaining operational efficiency.
9.2 – Once customer data is no longer needed, we securely dispose of it to prevent unauthorised access. Our methods include secure deletion for digital data and shredding for physical data, following industry standards to ensure complete data destruction.
10.0 - Employee Training and Access Control
10.1 – Employees with access to sensitive data undergo regular security training, staying up-to-date on best practices and regulatory changes. This training reinforces our commitment to handling your information securely.
10.2 – We implement strict access controls to limit data exposure, allowing only authorised employees to access sensitive customer information. Role-based access control ensures that data is accessible only to those who need it to perform their roles, protecting customer privacy and confidentiality.
11.0 - Incident Response and Data Breach Protocol
11.1 – We have an incident response plan in place to address potential data breaches or security incidents. This plan outlines steps for immediate response, investigation, and resolution to minimise any impact on our customers.
11.2 – In the unlikely event of a data breach, we will notify affected customers as soon as possible and provide guidance on protective steps they can take. This aligns with GDPR requirements for timely data breach notification.
12.0 - Secure Payment Gateway Partnership
12.1 – We partner with a secure, PCI-DSS compliant payment gateway to process online payments, ensuring that all payment transactions meet the highest standards of payment security.
13.0 - Customer Responsibility in Security
13.1 – We encourage customers to use strong, unique passwords and update them regularly. Avoid reusing passwords across multiple sites to help protect your account.
13.2 – Customers should be cautious of any emails or messages requesting sensitive information. We will never ask for personal or payment details through unsecured channels.
14.0 - Security Certifications and Compliance
14.1 – Where applicable, we strive to align our security practices with ISO/IEC 27001 standards for information security management, reinforcing our commitment to implementing international best practices in data protection.
14.2 – We are fully compliant with GDPR standards, ensuring transparent and lawful data processing, robust data protection measures, and respect for user rights.
15.0 - Mobile Security and Device Compatibility
15.1 – In the event of a complaint, we are committed to keeping you updated throughout the process, either via telephone or email. We strive to resolve your complaint promptly and efficiently.
16.0 - Vulnerability Disclosure Program
16.1 – We encourage security researchers and users to report any security vulnerabilities they may find on our website. Reports can be sent to our Security Team at [email protected]. We are committed to addressing reported issues promptly and appreciate the responsible disclosure of security concerns.
16.2 – To promote a culture of security, we commit to not pursuing legal action against individuals who responsibly report security vulnerabilities, provided they do not compromise or abuse our data or systems.
17.0 - Other Information
17.1 – This policy was last updated on 4th February 2025.