Security Policy

Last Updated: August 17, 2024

At Bordalum, we are committed to protecting the security of your personal information and maintaining the integrity of our systems. This Security Policy outlines the measures we implement to safeguard your data and ensure a secure environment for our online consultation services.

Information Security Framework

We maintain a comprehensive information security framework designed to protect against unauthorized access, disclosure, alteration, or destruction of your personal information. Our security practices are regularly reviewed and updated to address emerging threats and vulnerabilities.

Data Protection Measures

Encryption

All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive information stored on our systems is encrypted at rest using advanced encryption algorithms to prevent unauthorized access.

Access Controls

We implement strict access control policies to ensure that only authorized personnel can access your personal information. Access is granted on a need-to-know basis and is regularly reviewed. All employees and contractors with access to personal data are bound by confidentiality obligations.

Authentication

User accounts are protected by secure authentication mechanisms. We encourage users to create strong passwords and may implement additional authentication factors to enhance account security.

Network Security

Our infrastructure is protected by firewalls, intrusion detection systems, and other security technologies to prevent unauthorized access and malicious activities. We continuously monitor our systems for suspicious behavior and potential security incidents.

Secure Development Practices

Our development team follows secure coding practices and conducts regular security assessments of our applications. We perform vulnerability testing and code reviews to identify and address potential security weaknesses before deployment.

Third-Party Service Providers

We carefully select third-party service providers and require them to maintain appropriate security measures to protect your information. All third parties with access to personal data are contractually obligated to maintain confidentiality and security standards consistent with this policy.

Data Backup and Recovery

We maintain regular backups of our systems and data to ensure business continuity and data recovery in the event of a system failure or security incident. Backup data is stored securely and is subject to the same security controls as production data.

Incident Response

We have established incident response procedures to address security breaches or data incidents promptly and effectively. In the event of a security incident that affects your personal information, we will notify you in accordance with applicable legal requirements and take appropriate steps to mitigate any harm.

Reporting Security Concerns

If you discover a security vulnerability or have concerns about the security of our services, please report it immediately to our security team at help@bordalum.com. We appreciate responsible disclosure and will work with you to address any legitimate security issues.

Employee Training and Awareness

All employees receive regular training on information security best practices, data protection requirements, and their responsibilities in maintaining the security of customer information. We foster a culture of security awareness throughout our organization.

Physical Security

Our facilities and data centers maintain physical security controls including access restrictions, surveillance systems, and environmental controls to protect against unauthorized physical access to systems and data.

Data Retention and Disposal

We retain personal information only for as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by law. When data is no longer needed, we securely delete or anonymize it using methods that prevent recovery or reconstruction.

Compliance and Auditing

We regularly assess our security practices to ensure compliance with applicable laws, regulations, and industry standards. Internal and external audits may be conducted to verify the effectiveness of our security controls.

User Responsibilities

While we implement robust security measures, the security of your account also depends on your actions. You are responsible for:

Maintaining the confidentiality of your account credentials and not sharing them with others.

Using strong, unique passwords and changing them regularly.

Logging out of your account when using shared or public devices.

Keeping your contact information current so we can reach you regarding security matters.

Promptly notifying us of any unauthorized access to your account or suspected security breach.

Limitations

While we strive to protect your personal information, no security system is completely impenetrable. We cannot guarantee absolute security of data transmitted over the internet or stored on our systems. You acknowledge that you provide information at your own risk.

Updates to This Policy

We may update this Security Policy periodically to reflect changes in our security practices, technology, or legal requirements. We will post the updated policy on our website with a revised effective date. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Information

If you have questions or concerns about our security practices or this Security Policy, please contact us:

Email: help@bordalum.com

Phone: +380671206951

Address: Skvyrs'ke Hwy, 194, Bila Tserkva, Kyiv Oblast, Ukraine, 09100

We are committed to maintaining the highest standards of security to protect your information and earn your trust.