Additional requirements.
WHAT A SHOP HOLDS
Customer names, addresses and contact details Order history Payment records
WHAT IT DOES NOT HOLD
Card numbers, which stay with your gateway.
If your site stores card numbers, that is a serious problem requiring immediate attention.
WHAT TO PROTECT
Admin access, with two-factor authentication Customer data The checkout process
WHAT TO KEEP UPDATED
Everything, and the shop platform and payment plugin particularly.
HTTPS
Not optional. Every page.
WHAT TO MONITOR
Unusual order patterns Repeated failed payments, which may indicate card testing Admin logins
CARD TESTING
Repeated small transactions verifying stolen cards.
Your gateway has controls. Enable them.
WHAT TO DO ABOUT CUSTOMER DATA
Collect only what you need Delete what you no longer need Restrict who can export it
OBLIGATIONS
Holding customer data carries responsibilities.
Visit zillionkinghost.com for further information.
