Data Security Policy

1. Introduction

At legalliquorhub (www.legalliquorhub.com), we deeply value the trust our users place in us. We are committed to safeguarding your data through comprehensive security measures and responsible data practices.

This Data Security Policy applies to all users of our services and to any parties with access to our systems, including employees, vendors, and authorized partners.

2. Compliance

We ensure compliance with relevant data security laws including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Our third-party payment providers are compliant with payment security standards to handle sensitive payment data securely.

3. Access Control

• Secure access through HTTPS.
• Strong password policies (complexity, expiration, lockout).
• Least privilege access model with regular audits and immediate revocation upon termination.

4. Security Policies

We review and update our security policies annually. Employees are required to acknowledge these policies and undergo regular security training based on their roles.

5. Physical Security

Our infrastructure is hosted in secure data centers in India with 24/7 surveillance, visitor management, and strict access protocols.

6. Personnel Screening

All employees undergo background checks, sign NDAs, and receive privacy and security training during onboarding and periodically thereafter.

7. Penetration Testing & Vulnerability Assessments

We perform regular internal and third-party vulnerability scans and penetration tests across environments. Any identified issues are remediated based on severity.

8. Data in Transit Encryption

All data in transit is encrypted using industry-standard cryptographic mechanisms. Data transfers are logged and monitored for compliance.

9. Data Classification

Data is classified to ensure appropriate handling:

• Public Company Data: Openly accessible, minimal risk if disclosed.
• Proprietary Company Data: Sensitive internal information, limited access.
• Confidential Company Data: Highly sensitive, shared only with strict authorization.
• Confidential Customer Data: Only accessible to authorized personnel. Disclosure may impact trust and liability.
• Public Customer Data: Non-sensitive information accessible publicly.

10. Asset Management

We maintain up-to-date records of assets with encryption and antivirus tools on company-issued devices. Only authorized hardware can access production systems.

11. Product Development

Our developers follow secure coding standards and undergo bi-annual training in secure development practices.

12. Incident Response

We have an established incident response plan that includes detection, analysis, mitigation, and public communication. This is reviewed and tested regularly.

13. Breach Notification

If a security breach occurs, affected users will be notified promptly with steps to protect their data. We are committed to transparency and cooperation with users' reporting needs.

14. Business Continuity

Our systems are backed up regularly, encrypted, and stored securely. Backups are tested for availability and integrity.

15. Customer Responsibilities

Users must maintain account security by using strong passwords and securing their devices. Shared responsibility is key to data protection.

16. Logging & Monitoring

We log system activity centrally for audits, diagnostics, and security monitoring. Assistance is available to users in the event of a data incident.

17. Contact

For any data security queries, please contact us at: help@legalliquorhub.com