Information Security is important in any business.  Effective in 2010, certain data security has been mandated by recent legislation. In addition to being compliant, information security is just good business.

 

 

 

1) Credit-card/charge-card data (including account number, control numbers, security numbers or PINS)are NEVER shared with persons inside or outside of Salon OGGI except during the required secure transmission of data during a POS (Point of Sale) transaction.

 

2) Data related to transactions is sent via a secure line.  My POS provider, Wells Fargo, ensures a safe transaction and is solely responsible for the secure transmission and retention of their data.   

 

3) No credit-card / charge-card data is EVER written down for later use or stored for later reference.

 

4) POS receipts do NOT contain the entire account number.  All numbers are scrambled or deleted when printed except for the last 4 digits.  POS receipts contain my business contact data, merchant ID, POS terminal ID, an Entry Method (swiped or keyed), total dollar amount, date and time, invoice number, approval code, approval method, and reference number.  No PIN/ control/security numbers appear on POS receipts and are never written down. Required data is only keyed at POS. 

 

5)POS receipts are maintained and stored securely and destroyed when no longer needed (after transactions have been recorded for required taxation records, for example).  

 

6) Customer data including names, addresses, phone numbers, transaction records, sales history, business preferences, preferred brands, etc. is NEVER sold, relayed or disseminated in ANY way (except as required during a POS transaction) to any vendors, merchants, other companies or individuals.

 

7) I complete a compliance review each year to ensure that legally required compliance with Information Security is maintained.