Security of Cardholders’ Information Policy for Edthrills Farms and Ventures

Security of Cardholders’ Information Policy for Edthrills Farms and Ventures

Last Updated: [Date]

At Edthrills Farms and Ventures, we prioritize the security and confidentiality of our customers' cardholder information. This policy outlines our commitment to protecting the personal and financial data of our users, in accordance with Flutterwave's Terms of Service and the Payment Card Industry Data Security Standard (PCI/DSS).

1. Introduction

As a merchant utilizing the Flutterwave payment gateway, we recognize the sensitivity of cardholder information. Our goal is to ensure that all transactions conducted through our Services are secure and compliant with industry standards. This policy applies to all cardholder data collected, processed, or stored by Edthrills Farms and Ventures.

2. Information We Collect

We may collect the following types of cardholder information:

  • Cardholder Name: The name as it appears on the card.
  • Card Number: The 16-digit number on the front of the card.
  • Expiration Date: The date when the card expires.
  • CVV: The 3-digit security code on the back of the card.
  • Billing Address: The address associated with the card.

3. Data Security Measures

To protect cardholder information, Edthrills Farms and Ventures implements the following security measures:

  • Encryption: All cardholder data transmitted over our website is encrypted using Secure Socket Layer (SSL) technology to prevent unauthorized access during transmission.
  • Access Control: Access to cardholder information is restricted to authorized personnel only. Employees are trained on the importance of safeguarding sensitive data and are required to follow stringent access protocols.
  • Tokenization: We utilize tokenization methods in our payment processing, which replace sensitive card information with a unique identifier (token) that cannot be reverse-engineered.
  • Regular Security Audits: We conduct regular security assessments and audits to ensure compliance with PCI/DSS standards and to identify and mitigate potential vulnerabilities.

4. Compliance with PCI/DSS

Edthrills Farms and Ventures complies with PCI/DSS requirements to ensure the secure handling of cardholder information. This includes:

  • Maintaining a secure network and systems to protect cardholder data.
  • Implementing strong access control measures.
  • Regularly monitoring and testing networks to identify vulnerabilities.
  • Maintaining an information security policy that addresses data protection.

5. Sharing of Cardholder Information

We do not sell or rent cardholder information to third parties. Cardholder data may only be shared with:

  • Payment Processors: Information is shared with Flutterwave and other authorized payment processors solely for the purpose of completing transactions.
  • Legal Authorities: We may disclose cardholder information if required by law or in response to valid requests by public authorities.

6. User Responsibilities

As a user of our Services, you are responsible for:

  • Protecting your account information and credentials.
  • Not sharing your card information with unauthorized parties.
  • Regularly monitoring your account for any suspicious activity.

7. Data Retention Policy

We retain cardholder information only for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations. After this period, cardholder information will be securely deleted or anonymized.

8. Reporting Security Incidents

If you suspect any unauthorized access to your cardholder information or experience a security incident, please contact us immediately at:

9. Changes to This Policy

Edthrills Farms and Ventures reserves the right to modify this Security of Cardholders’ Information Policy at any time. Any changes will be posted on our website, and we will notify you of any significant updates.

10. Contact Information

For any questions or concerns regarding this policy, please reach out to us at:

  • Email: edthrillsfarms@gmail.com
  • Phone: +234 803 457 9831
  • Address: 3 Bewhe Road, Okoroem, Obudu Town, Cross River State, Nigeria

By using Edthrills Farms and Ventures services, you acknowledge that you have read and understood this Security of Cardholders’ Information Policy and agree to its terms. Thank you for trusting us with your information! Your security is our priority.