Cybersecurity Policy
Last updated: May 5, 2026
Purpose
This policy outlines how The Heather Show safeguards information collected through our website and digital channels against unauthorized access, disclosure, alteration, and destruction.
Data Protection
All data transmitted to and from our site is encrypted in transit using HTTPS/TLS. Data at rest with our cloud providers is encrypted following industry-standard practices.
Access Controls
Access to backend systems is limited to authorized personnel using strong authentication, including multi-factor authentication where available, and role-based permissions.
Vendor Security
We partner only with reputable hosting, analytics, and infrastructure providers that maintain SOC 2, ISO 27001, or equivalent certifications.
Incident Response
In the event of a suspected security incident, we investigate promptly, contain the issue, and notify affected individuals and relevant authorities as required by applicable law.
Your Role
Use strong, unique passwords for any accounts associated with our services, keep your devices and browsers updated, and be cautious of phishing emails impersonating The Heather Show.
Reporting
To report a suspected vulnerability or security concern, email hgallagher@acrisure.com. We appreciate responsible disclosure.