Security Policy

1. GLOBAL ONLINE STORE SECURITY POLICY
  1. Protection of Personal Data

PERUVIAN ALPACA has decided to comply with all applicable laws and regulations regarding the protection of personal data when collecting, processing, and storing Users’ personal information. Likewise, PERUVIAN ALPACA will provide appropriate measures to ensure its security and privacy.

  1. Cryptographic Controls

PERUVIAN ALPACA uses SSL security certificates in order to protect the security of information created, processed, stored, transmitted, or maintained through its business operations.

  1. Asset Management and Access Control

PERUVIAN ALPACA controls the operation of its business processes by ensuring security through authentication methods that guarantee only authorized personnel have access to Users’ personal and financial information. In addition, PERUVIAN ALPACA protects information from threats arising from personnel managing such information.

  1. Operational Security

PERUVIAN ALPACA has decided to implement and operate the “OpenPay” payment gateway in order to provide secure online transactions.

To safeguard all information created, processed, stored, and transmitted through User transactions, “OpenPay” complies with the Payment Card Industry Data Security Standard (PCI DSS) requirements and employs security measures to protect Users’ credit and debit card information. PERUVIAN ALPACA does not store Users’ card information on our servers.

  1. Telecommunications Security

PERUVIAN ALPACA controls the operation of its business processes by ensuring the security of technological resources and data networks. In addition, PERUVIAN ALPACA conducts security assessments and testing (Persistent Ethical Hacking) to ensure the integrity of our systems and protect them against unauthorized access.

PERUVIAN ALPACA is committed to ensuring the protection of information with the firm purpose of reducing the impact on its assets caused by identified risks in a timely manner, in order to maintain an acceptable level of exposure that guarantees the integrity, confidentiality, and availability of information. We are committed to informing affected Users within a reasonable timeframe, in accordance with applicable laws and regulations.

2. COMMITMENT OF MANAGEMENT

PERUVIAN ALPACA shall ensure compliance with all established legal, regulatory, and contractual obligations.