Protecting your information is important to us. When information is submitted via the website, we take steps to protect this information. All information collected in our systems is encrypted and transmitted in a secure manner. All requests from the system are forced into secure mode utilizing averifiable certificate generated by a well-known certificate store. The footer of each page contains a "verified" security badge that may be used to verify the authenticity of the site.
Only persons having a specific need are granted access to your information as necessary in the performance of their duties.
The physical and virtual servers utilized to store and access private information are kept in a secure environment by our hosting provider.
Passwords play a critical role in identifying, verifying, authorizing, and auditing system usage. As such, it is imperative that passwords not be shared even between members of the same team. For audit purposes, each user of the system must use a unique login. If login usage sharing has been detected the involved login(s) shall be immediately disabled for remedial action.
Passwords are stored in a one-way hash (a form of encryption that is non-reversible) and are not visible to anyone with access to the system. No individual having access to the system, including high level technicians, may read your password. If you forget your password, you must use the"forgot password" function to generate a unique time-limited reset token and link that will be sent to the email address associated with your credentials. Contacting customer care for a forgottenpassword will result in the same reset token and link email being generated by a care agent.
Multiple failed password attempts will result in the account becoming locked for a preset period oftime. This action is to prevent would-be hackers from continually submitting auto-generated passwords until they gain access to your account.
Security - Payment information collected and utilized by our website is stored in an encrypted format that has been locked to the individual server that generated the encryption key. A limited number of persons have access to the account numbers to perform such actions as billing and customer care.
Auditability - Each time your encrypted account information is accessed an audit log entry is retained detailing the date, time, and user requesting access.
Transmission - Whenever this information is utilized for payment, it is submitted to the third-party processors (e.g., a bank or credit card clearing house) in an encrypted and secured manner.