Obligations and practicalities.
WHAT YOU HOLD
Names, phone numbers, addresses, order history, email addresses.
All personal data, all carrying obligations.
PRACTICAL MEASURES
Collect only what you need. Remove form fields you do not act on. HTTPS across the whole site Strong passwords and two-factor authentication on anything holding the data Administrator accounts only for people who need them Delete data you no longer need Never store card details
EXPORTED DATA
A customer list downloaded as a spreadsheet must not sit in a web-reachable folder. Anyone guessing the URL can take it.
Keep exports off the server, in access-controlled storage.
WHO HAS ACCESS
A developer with access to your site has your customer database. Consider that when granting access, and revoke it when the work ends.
IF THERE IS A BREACH
Contain it, establish what was exposed, and open a ticket with us so we can check the account.
Tell affected customers honestly.
FOR SPECIFIC OBLIGATIONS
Visit zillionkinghost.com for further information, and take proper advice for your circumstances.
