Security Policy
At CareAlert, we are committed to safeguarding the confidentiality, integrity, and availability of your personal information. We implement comprehensive security measures to protect your data, whether stored electronically or in physical form.
Data Security Measures
We employ industry best practices to secure personal information held in both electronic and physical formats. These measures include, but are not limited to:
All data transmitted through our website is protected using 2048-bit v3 SSL encryption.
We utilize firewalls, intrusion detection systems, and secure network architecture to prevent unauthorized access.
Access to personal information is restricted to authorized personnel only, based on a need-to-know basis.
Secure login processes and password protection are enforced to prevent unauthorized account access.
Regularly updated anti-virus and anti-malware software protects our systems from threats.
Security filters are in place to identify and block malicious content.
Physical Security
Hard-copy records containing personal information are stored in secured facilities with controlled access. Only authorized staff have access to these documents.
E-commerce Platform Security (Shopify)
Our online store is powered by Shopify, a leading e-commerce platform known for its robust security features:
Shopify is certified Level 1 PCI DSS compliant, ensuring secure handling of credit card information.
All Shopify stores come with 256-bit SSL certificates, encrypting data transmitted between your browser and our store.
Shopify supports 2FA for account access, adding an extra layer of security.
Shopify continuously updates its platform to address emerging security threats.
Shopify provides built-in tools to detect and prevent fraudulent transactions.
Credit Card Information
We do not store credit card information on our servers. All credit card transactions are securely transmitted and processed directly by our trusted banking partner using PCI DSS-compliant systems.
Compliance and Review
Our security practices align with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and are reviewed regularly to ensure ongoing compliance and continuous improvement.
