Draft: this page is pending legal review. Text in [brackets] is a placeholder for information that still has to be confirmed.
This Security Policy explains the measures we take to protect the website, your account and your bookings, and how to tell us about a security problem.
Our approach
Every connection to the site uses HTTPS, and the site asks browsers to use HTTPS only. Access to our database is restricted by row-level security rules. [Other security measures we operate, to be confirmed].
Payments
Card payments are completed on the OnePay payment gateway's page. The site sends you there and never receives your card number. Payment confirmations are checked on our servers before a booking is marked as paid.
Your account
Sign in with an email address and a strong, private password, and sign out on shared devices. [Password rules and sign-in protections, to be confirmed].
Reporting a security issue
If you think you have found a security problem, email travel@golfadventuretours.com with a description of the problem and the steps to reproduce it. Please do not test on other customers' accounts or data. [Responsible disclosure process and security contact, to be confirmed].
Limits
No online service can be completely secure. [Limits of responsibility for security incidents, to be confirmed].
Changes to this policy
We may update this Security Policy as our systems change. The date at the top of the page shows when it last changed.
Contact us
Send security questions to travel@golfadventuretours.com.