Security

Your security and privacy are our top priorities.

How we protect your data

Data encryption

All data is encrypted in transit and at rest using industry-standard protocols

Secure authentication

Multi-factor authentication and secure password requirements

Privacy controls

Granular privacy settings to control what data you share

Secure infrastructure

Hosted on secure, compliant cloud infrastructure with regular audits

Regular security audits

Third-party security assessments and penetration testing

Threat monitoring

24/7 monitoring for suspicious activity and automated threat detection

Our security practices

Data protection

We use AES-256 encryption for data at rest and TLS 1.3 for data in transit. All sensitive data, including passwords and payment information, is encrypted using industry-standard cryptographic protocols. Payment processing is handled by PCI-DSS compliant third-party processors.

Access controls

We enforce strict access controls and follow the principle of least privilege. Employee access to user data is logged and monitored. Multi-factor authentication is required for all administrative access.

Infrastructure security

Our infrastructure is hosted on secure, ISO 27001 certified cloud platforms. We use firewalls, intrusion detection systems, and DDoS protection. Regular security patches and updates are applied to all systems.

Incident response

We have a comprehensive incident response plan in place. In the unlikely event of a security incident, we will investigate promptly, take corrective action, and notify affected users in accordance with applicable regulations.

Compliance

We comply with GDPR, UK Data Protection Act, and other relevant data protection regulations. We conduct regular compliance audits and maintain appropriate documentation of our security practices.

Security best practices for users

  • Use strong passwords

    Create unique, complex passwords with a mix of letters, numbers, and symbols

  • Enable two-factor authentication

    Add an extra layer of security to your account

  • Keep software updated

    Regularly update your browser and operating system

  • Beware of phishing

    We will never ask for your password via email. Be cautious of suspicious messages

  • Review account activity

    Regularly check your account for any unauthorised activity

Report a security issue

If you discover a security vulnerability, please report it to us immediately. We take all security reports seriously and will investigate promptly. Please include as much detail as possible about the vulnerability.

Security team: security@layawaygo.com