Data Protection & Security Policy

Security principles

We apply defence-in-depth and least-privilege principles across our infrastructure, aligned to recognised standards for information security and payment data protection.

Technical safeguards

• Encryption of data in transit (TLS) and at rest.
• Tokenisation of sensitive card and account data; we do not store full card numbers on our systems.
• Access controls, maker-checker approvals, audit logging and monitoring.
• Regular vulnerability assessment, penetration testing and secure development practices.

Breach response

We maintain an incident-response process to detect, contain and remediate security events, and to notify affected users and authorities where required by law.

Your role

Keep your credentials confidential, enable available security features, and report suspected compromise immediately.