Security
Policy
Last Updated 01.02.2025
1. Introduction
Bridget Sarah is committed to maintaining the highest level of security in our web development and mobile app services. This policy outlines our security commitments and clarifies our responsibilities regarding third-party software and server management.
2. Scope
This policy applies to all projects, websites, and applications developed by Bridget Sarah and hosted on our servers. It defines our security practices and limits our liability regarding third-party software and services.
3. Security Responsibilities
- Development Security: We follow industry best practices in secure coding, including data encryption, secure authentication methods, and regular security audits.
- Server Security: Our team ensures that the hosting environment is regularly updated and monitored for vulnerabilities.
- Data Protection: We prioritize customer data security and compliance with relevant regulations such as GDPR and data privacy laws.
4. Third-Party Software Disclaimer
Bridget Sarah does not take responsibility for the security, maintenance, or functionality of any third-party software, plugins, libraries, or external services integrated into a client’s website or application. This includes but is not limited to:
- WordPress plugins and themes
- Third-party APIs and integrations
- Payment gateways
- External hosting providers
- Software licensed or provided by other vendors
Clients are responsible for ensuring that all third-party software remains up-to-date and secure. Any issues arising from third-party software must be directed to the respective vendor’s support team.
5. Server Management Policy
- Hosting Responsibility: Bridget Sarah provides server infrastructure and hosting as part of its services but does not offer direct technical support for third-party server-related issues.
- Security Updates & Maintenance: While we implement security patches and perform regular server maintenance, we are not liable for breaches or vulnerabilities caused by external hosting providers, third-party software, or client-side misconfigurations.
- Client Responsibility: Clients are responsible for ensuring their accounts, passwords, and access credentials remain secure. Any security issues related to client-side management or misconfigured settings are outside of our liability.
- Daily Backups: Servers are backed up for free on a daily basis to ensure data security and recovery in case of an emergency.
- Malware and Infected Websites: If a client’s website is compromised due to installing a plugin containing malware, they will be required to either rebuild their website themselves or pay a £150 fee for Bridget Sarah to rebuild it.
6. Incident Response
- If a security breach is detected, we will take immediate steps to mitigate the impact and inform affected clients.
- If a breach occurs due to third-party software or client mismanagement, Bridget Sarah will provide recommendations but is not responsible for fixing the issue.
7. Policy Updates
This security policy is subject to change based on evolving threats and industry best practices. Clients will be notified of significant updates.
By using our services, clients acknowledge and accept this security policy and its outlined responsibilities.