Security Policy

At UP Inspired, protecting your personal and payment information is our top priority. We implement comprehensive security measures to safeguard your data and ensure secure transactions.

PCI DSS Compliance

UP Inspired is committed to maintaining Payment Card Industry Data Security Standard (PCI DSS) compliance. Our payment processing infrastructure meets the highest security standards:

• All payment data is processed through PCI DSS Level 1 compliant service providers
• We do not store credit card information on our servers
• All payment transactions are encrypted using industry-standard TLS protocols
• Regular security assessments and vulnerability scans are conducted
• Access to payment systems is strictly controlled and monitored

Data Security Measures

Encryption

• All data in transit is encrypted using TLS 1.3
• Sensitive data at rest is encrypted using AES-256 encryption
• Database encryption with industry-standard protocols
• Encrypted backups with secure key management

Access Controls

• Multi-factor authentication for all administrative access
• Role-based access control with principle of least privilege
• Regular access reviews and user account audits
• Automated account lockout for suspicious activities

Infrastructure Security

• Cloud infrastructure with enterprise-grade security
• Network segmentation and firewall protection
• Intrusion detection and prevention systems
• Regular security patches and updates

Data Retention and Disposal

We maintain strict data retention policies:

• Personal Data: Retained only as long as necessary for business purposes or legal requirements
• Payment Information: Not stored on our systems; processed securely through third-party providers
• Transaction Records: Retained for 7 years for accounting and tax purposes
• Marketing Data: Retained until consent is withdrawn or account is deleted
• Secure Disposal: All data is securely deleted using industry-standard methods

Third-Party Security

We carefully vet all third-party service providers:

• All vendors must meet our security standards and compliance requirements
• Data Processing Agreements (DPAs) in place with all data processors
• Regular security assessments of third-party providers
• Limited data sharing based on necessity and consent

Key Partners

• Payment Processing: Stripe (PCI DSS Level 1 compliant)
• Email Services: Industry-standard encryption and privacy protections
• Cloud Hosting: Enterprise-grade security certifications
• Analytics: Privacy-focused analytics with data anonymization

Incident Response

In the unlikely event of a security incident:

• 24/7 monitoring systems detect and alert on potential threats
• Dedicated incident response team activated within minutes
• Immediate containment and assessment procedures
• Affected users notified within 72 hours as required by law
• Regulatory authorities notified as required
• Post-incident review and security improvements implemented

Employee Security Training

• Mandatory security awareness training for all employees
• Regular phishing simulation exercises
• Data handling and privacy training programs
• Background checks for employees with data access
• Confidentiality agreements and security policies

Reporting Security Issues

If you discover a security vulnerability or have concerns about our security practices, please contact us immediately:

• Security Team: rkissinger413@gmail.com
• Emergency Hotline: (555) 123-SECURITY
• Response Time: We aim to respond to security reports within 24 hours

Compliance and Certifications

UP Inspired maintains compliance with:

• Payment Card Industry Data Security Standard (PCI DSS)
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA/CPRA)
• SOC 2 Type II compliance (through our service providers)
• ISO 27001 information security management principles

Updates to This Policy

This Security Policy is reviewed and updated regularly to reflect changes in our security practices and regulatory requirements. The last update was made on 10/29/2026.

For questions about our security practices, please contact our security team at rkissinger413@gmail.com