Security Policy

Introduction

At RS ComForTIs Orthotic Custom Insoles (https://rsorthotic.co.uk), we take the security of your personal data and the integrity of our website very seriously. This Security Policy outlines the measures we take to ensure that your information is protected from unauthorized access, disclosure, or misuse. We are committed to providing a secure online environment, prioritising data security, and adhering to relevant UK data protection laws, including the Data Protection Act 2018 and the GDPR.

1. Data Security Measures

We implement a variety of technical, physical, and organizational security measures to safeguard the personal information you share with us. These include, but are not limited to:

• SSL Encryption: All sensitive data transmitted via our website is encrypted using Secure Socket Layer (SSL) technology, ensuring that your information is securely transmitted over the internet.

• Firewalls & Intrusion Detection Systems (IDS): We deploy firewalls and IDS to detect and block malicious traffic, protecting our network from cyber threats and attacks.

• Regular Security Audits: Our systems are regularly audited to identify and resolve potential vulnerabilities, ensuring we stay ahead of emerging security risks.

• Data Access Controls: We restrict access to personal data on a need-to-know basis. Only authorized personnel have access to sensitive data, and they are trained on security best practices.

• Two-Factor Authentication (2FA): We require two-factor authentication for accessing backend systems to enhance security for our administrative users.

2. Protection of Personal Data

We are committed to safeguarding your personal data and ensuring that it is processed lawfully, transparently, and securely. The types of personal information we may collect include:

• Name
• Email address
• Phone number
• Address (for shipping and billing purposes)
• Payment information (which is processed securely via trusted third-party payment processors)

How We Use Your Data:

We only use your personal data for legitimate business purposes, including:

• Processing orders and transactions
• Providing customer support
• Improving our website and services
• Communicating with you regarding your orders, promotions, or updates to our services

Data Retention:

We retain your personal data for as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by law.

3. Third-Party Providers

We work with trusted third-party service providers to facilitate the operation of our website, such as payment processors and delivery services. These third-party providers are carefully selected to ensure they meet stringent security and privacy standards, including compliance with the GDPR. We do not sell or rent your personal data to any third parties.

4. Compliance with UK Data Protection Laws

We comply with the Data Protection Act 2018 and the GDPR, which gives you certain rights over your personal data. These rights include:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request corrections to your personal data if it is inaccurate or incomplete.
• Right to Erasure: You can request the deletion of your personal data, subject to certain conditions.
• Right to Restrict Processing: You can request that we restrict the processing of your personal data in specific circumstances.
• Right to Object: You can object to certain types of data processing, including direct marketing.
• Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.

For further details, please refer to our Privacy Policy.

5. Secure Payment Processing

We ensure that all transactions conducted on RS ComForTIs Orthotic Insoles are processed securely through trusted third-party payment providers. Payment information is never stored on our website. We use PCI-DSS compliant payment processors to ensure the security of all credit card and payment data.

6. Cookies and Tracking Technologies

To improve your experience and provide personalized services, we use cookies and other tracking technologies on our website. These tools help us monitor website traffic, track user preferences, and improve our services. You can control cookies through your browser settings.

For more information on how we use cookies, please review our Cookie Policy.

7. Website Vulnerability Testing

We perform ongoing website vulnerability testing to identify and resolve any potential threats to the website and your personal information. Our security protocols are continuously updated to protect against known and emerging cyber threats.

8. User Responsibilities

While we make every effort to protect your information, you also play a role in maintaining security:

• Use Strong Passwords: We recommend using strong and unique passwords for your account on our website.
• Keep Software Updated: Ensure that your browser and devices are kept up-to-date with the latest security patches.
• Notify Us of Suspicious Activity: If you notice any suspicious activity on your account or if you believe your account may have been compromised, please contact us immediately.

9. Contact Us

If you have any questions or concerns regarding our security measures or how your personal data is handled, please do not hesitate to contact us at:

RS Orthotic Customer Support
Email: contact@rsorthotic.co.uk
Phone: +44 7775 7547 20  (Office Hours: Monday - Friday, 9:00 AM - 5:00 PM)

10. Updates to This Security Policy

We may update this Security Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Please check this page periodically for any updates.