At 3R Creative, we take the security and privacy of our customers’ information seriously.
This Security Incident Response Policy explains how we identify, manage and respond to security incidents that may affect personal information processed through LS (Luxury Shoppe).
Our goal is to protect customer information, minimise potential risks and ensure that any security incidents are handled responsibly and promptly.
What Is a Security Incident?
A security incident is any event that may affect the safety, confidentiality or availability of information. Examples include:
- Unauthorised access to customer information.
- Accidental exposure or sharing of personal data.
- Loss or theft of devices containing business information.
- Suspicious account activity or compromised login credentials.
- Attempts to disrupt or access our services without permission.
- Technical issues that may affect the security or availability of our platform.
All reported incidents are reviewed and handled according to their severity and potential impact.
How We Handle Security Incidents
When a security incident is identified, we follow a structured response process.
- Identification
- We review reported security concerns and investigate suspicious activities.
- Assessment
- We evaluate the incident, identify the information and services affected, and determine the potential impact.
- Containment
- We take appropriate steps to prevent further unauthorised access, exposure or damage.
- Resolution
- We work to resolve the issue, restore affected services and strengthen our security measures.
- Review
- After resolving an incident, we review what happened and identify improvements to help prevent similar incidents in the future.
Security Incident Notifications
If a security incident affects personal information, we will take appropriate steps to inform the affected parties. Depending on the nature and severity of the incident, notifications may be provided to:
- Affected customers and users.
- Relevant business partners.
- Shopify, where Shopify-related customer information is involved.
- Applicable regulatory authorities, where required by law.
We aim to provide notifications without unnecessary delay and in accordance with applicable legal requirements.
Where required under applicable GDPR rules, relevant supervisory authorities will be notified within 72 hours of becoming aware of a reportable personal data breach.
Notifications will include relevant information about the incident, its potential impact and the steps taken to address it.
Security Measures
We implement appropriate security measures to protect information processed through LS (Luxury Shoppe). These measures include:
- Restricted access to customer and business information.
- Secure user authentication and account management.
- Data encryption to protect sensitive information.
- Monitoring of important system activities.
- Secure handling of third-party integrations.
- Separation of development and production environments.
- Appropriate data retention and deletion practices.
- Regular reviews of our security practices.
We continuously work to improve our security measures as our platform and services evolve.
Reporting a Security Concern
We encourage customers and users to report any suspected security issues or unauthorised access involving LS (Luxury Shoppe).
If you notice suspicious activity or believe your information may have been compromised, please contact us. All reported concerns will be reviewed and handled with appropriate attention.
Report a security concern
info@creative3r.com
Policy Updates
We may update this policy periodically to reflect changes in our services, security practices and applicable legal requirements. Any updates will be published on this page.