Security policy

At Surfsmith, we are committed to ensuring the security of your personal information and the integrity of our online store. This Security Policy outlines the steps we take to protect your data when you interact with our website.

1. Platform Security

Surfsmith is hosted on Shopify, a secure and trusted e-commerce platform. Shopify is PCI DSS (Payment Card Industry Data Security Standard) compliant and implements industry-standard encryption and security practices to safeguard personal and payment information.

2. Data Transmission & Encryption

All data exchanged between your browser and our website is encrypted using Secure Socket Layer (SSL) technology. You can confirm this by looking for the padlock icon in your browser’s address bar and the “https://” prefix in our web address.

3. Payment Security

All transactions are processed through secure payment gateways (e.g., Shopify Payments, PayPal) that are PCI DSS compliant. Surfsmith does not store or have access to your full credit card details at any time.

4. Customer Account Security

If you create an account with us, it is your responsibility to maintain the confidentiality of your login credentials. We recommend using a strong, unique password and logging out after each session on shared devices.

5. Third-Party Services

We only partner with third-party providers who meet high security standards and comply with Australian privacy laws. These providers may only access personal information necessary to perform their services.

6. Monitoring & Risk Management

Surfsmith monitors its systems for vulnerabilities and employs protective measures to detect, prevent and respond to threats. While no method is 100% secure, we strive to maintain a high level of security.

7. Reporting Concerns

If you suspect any security breach or have concerns about the protection of your data, please contact us immediately at:

Email: info@surfsmith.com.au
Phone: 0413 811 45
Address: 964 Dandenong Rd, Carnegie, VIC 3163

8. Policy Updates

We may update this Security Policy from time to time. Changes will be posted on this page and are effective immediately upon publication.