Information Security Policy

Information Security Policy

Click HERE to download our complete policy

1. Purpose and Scope

This Information Security Policy establishes the framework for protecting information assets and ensuring the confidentiality, integrity, and availability of data processed by Lady Fortunes Inc.

2. Data Protection and Encryption

Data in Transit: All personal data transmitted is encrypted using TLS 1.2 or higher protocols.

Data at Rest: Personal data stored in our systems is encrypted using AES encryption or equivalent symmetric encryption schemes.

Backup Security: All data backups are encrypted using industry-standard encryption methodologies.

3. Access Controls

We implement strict access controls including:

• Strong password requirements for all staff and service accounts
• Multi-factor authentication for system access
• Role-based access permissions
• Regular access reviews and updates

4. Data Minimization and Retention

We process only the minimum amount of personal data necessary to meet functional requirements and maintain established retention periods for all datastores containing personal data.

5. Security Monitoring and Incident Response

Monitoring: We maintain comprehensive access logs for all datastores containing personal data.

Incident Response: We have established security incident response processes and plans to address potential security breaches promptly.

Vulnerability Management: Our vulnerability reporting program includes defined policies and timelines for acknowledgment and remediation.

6. Security Assessments

We conduct regular security assessments including:

• Annual security penetration testing
• Independent third-party security assessments
• Regular security audits and reviews

7. Employee Training and Policies

All employees receive training on data protection and security procedures. We maintain and enforce policies governing how employees interact with personal data.

8. Infrastructure Security

Our security measures include:

• Separation of test and production environments
• Secure cloud infrastructure with appropriate safeguards
• Regular security updates and patch management
• Data loss prevention strategies

9. Compliance and Certifications

We strive to maintain relevant security certifications and comply with applicable data protection regulations including GDPR where applicable.

10. Contact Information

For security-related inquiries or to report security vulnerabilities, please contact us at: Sarina@LadyFortunes.com

Last Updated: September 2025

Next Review Date: September 2026