Protecting websites, hosting environments, and client data is an important part of the services provided by Ctrl-X Digital Ltd.
We follow appropriate technical and organisational practices designed to help maintain the security, availability, and integrity of hosted systems and client information.
Account Security
- Strong, unique passwords should be used for all accounts and services.
- Two-factor authentication (2FA) is recommended wherever available.
- Passwords should be stored securely using a password manager or approved secure system.
- Access to client systems is restricted to authorised personnel where required for operational support.
- See the Passwords support page.
Website & Hosting Security
- Websites and hosting environments are monitored to help identify service interruptions or security issues.
- WordPress core, plugins, and themes are generally updated as soon after release as practical.
- Secure connections and encrypted protocols are used where appropriate.
- Access permissions are restricted to minimise unnecessary exposure.
Data Handling
- Client data is only accessed where necessary to deliver agreed services or support.
- Information shared with Ctrl-X Digital Ltd should be transferred securely wherever possible.
- Sensitive information should not be shared via unsecured email or messaging platforms unless appropriately protected.
- Backup and recovery procedures are maintained to support service continuity.
Operational Security
- Devices and systems used for client work are protected using appropriate security controls.
- Systems are maintained and monitored to help reduce security risks and unauthorised access.
- Retired devices are securely wiped before disposal or reuse.
Important Notes
While reasonable steps are taken to maintain secure systems and working practices, no online system or third-party platform can be guaranteed to be completely secure.
Clients remain responsible for maintaining appropriate security practices within their own organisations, including password management, access control, and lawful handling of personal data.
