Website Security Policy

Scope

This policy applies to all USA Charms services, websites, and data processing activities. It covers both customer and internal data handled by our systems and partners.

Data we collect

We collect only what is necessary to provide services and comply with legal obligations. Typical categories include:

• Account data: name, email, billing information
• Transaction data: orders, payment receipts
• Usage data: logs, cookies, device identifiers
• Support data: messages you send to our support team

For details on sharing and retention, see the Access control & retention section below.

Security measures

We maintain technical and organizational controls to protect data:

• Encryption in transit (TLS) and at rest where applicable
• Least-privilege access and role-based controls
• Regular vulnerability scanning and patching
• Periodic security audits and third-party assessments

Access control & retention

Access to production data is restricted to authorized personnel. Data retention follows business and legal requirements — we delete or anonymize data when no longer required.

How to request data or deletion

Contact us with proof of identity and your request.

Incident response

We maintain an incident response plan. In case of a confirmed breach, we will:

1. Contain and investigate the incident
2. Notify affected users and authorities as required
3. Remediate and publish a post-incident report where appropriate

Contact

For security or privacy questions, contact us or call 480-884-1757.

Revision history