[ CleverThings.com ]  [ Company Policies ]  → Security Policy

Clever Things, LLC

Company Info
Contact Us
About Us
Employment
Trademarks
Charities
Investors
Vendors
Company News

Policies
Mission Statement
Terms of Use
Privacy Policy
Security Policy
Return Policy

Advertising
Advertise With Us
Ad Specifications
View Examples
Apply Today

Menus
Blogs
People
Places
Things
Payments

Our Security Policies

  Security Precautions
Security Breach Procedures
Certificates for Secure Web Browsing - HTTPS / SSL
Company Security Practices

Security Precautions

All of our forms that collect sensitive data utilize high-grade Secure Socket Layer (SSL) (AES-128 / 128-bit) encryption to ensure the security and integrity of your transmitted information. SSL is the preferred method of secure communication, and can be identified by the secure page being preceded by HTTPS:// in your web browser address bar. Many web browsers will also show the certificate owner in a blue or green box on the address bar.

Most web browsers will display a padlock icon in the bottom right corner, which is shown as locked, whenever your communication is secure.

We recommend that you always read and verify the security certificate information the first time you visit a web site, and be sure that this information matches the company that operates the web site.

If you prefer to not make credit card purchases over the Internet, we give you the option to pay by telephone or postal mail. You may use our web site to select all of your items on your shopping list, then choose the "Pay by Phone" or any of the other convenient options during the payment checkout process. (Sorry, no CODs!)

Security Breach Procedures

It is important that we have complete contact information for all of our customers so they can be immediately notified of any security incident. Our employees make every effort to always remain vigilant and maintain a high level of security at all times. Our corporate security policies go above and beyond the legal requirements for the payment card industry.

We carefully screen all of our employees (including call center representatives) with thorough background checks and random drug testing. Our employees know how to identify possible security breaches, and they have been extensively trained in mitigating security risks. Refresher training and audits are performed on a quarterly basis.

Certificates for Secure Web Browsing - HTTPS / SSL

To protect your sensitive data, we use a form of data encryption that requires your web browser to exchange a security "certificate" with our server. If your web browser gives you a warning message regarding a security certificate, ALWAYS VIEW THE CERTIFICATE before you accept the connection!

Company Security Practices

Physical Security is the first step in protecting data. Without good physical security, no other security practices can be effective. We own our secure data center and the servers are not shared with other companies. Only our Chief Executive Officer (CEO) and our Chief Operations Officer (COO) have physical access to this locked space which is also protected by a monitored alarm system with video cameras. All of our employees have been issued a photo identification card.

Technical Security is the second step in data protection. All of our data is encrypted as it is stored on disk. All computers and hard disks are protected with strong password authentication. This combination ensures that the data can't be accessed if there is ever a breach in physical security. The integrity of our file systems is monitored and all of our data is backed up to allow rapid restoration after a hardware failure.

In 2000, our company instituted a complete ban of all Microsoft products. Though controversial at the time, this policy has eliminated thousands of software vulnerabilities from our computer systems. Since the Microsoft ban, we have maintained every line of source code in the software we use - both open source and proprietary.

Administrative Security is the last step in keeping data secure. It begins with a careful selection of employees while maintaining up-to-date access control lists. We have a thorough training program for new employees and only the minimum of access privileges are granted.

If you have any questions or concerns about our corporate security practices, please contact us.