Overview

At Eheadshots.com, ensuring the security of customer data is our top priority. Our Security Policy outlines the comprehensive organizational and technical safeguards we have in place across the Eheadshots.com platform to ensure the utmost protection against unauthorized access, use, modification, or disclosure of customer data. Eheadshots.com services are hosted on trusted platforms including Amazon Web Services. Eheadshots.com engages certain sub-processors, including third parties listed below, and content delivery networks to support the delivery of Eheadshots Services.

Eheadshots.com evaluates the security, privacy, and confidentiality practices of potential sub-processors that will or may access or process Customer Content and establishes Data Protection Agreements with each approved sub-processor.

This advisory does not grant Customers any additional rights or remedies and should not be interpreted as a legally binding agreement. The information provided serves to outline Eheadshots.com's process for engaging sub-processors and to disclose the current list of third-party sub-processors and content delivery networks utilized by Eheadshots.com as of the date of this advisory (which Eheadshots.com may employ in the provision and support of its Services)."

Incident Response Protocol

We have established a formal procedure for handling security incidents and have provided comprehensive training to all our staff regarding these protocols. Upon detection of a security incident, it is immediately escalated, and our dedicated team is promptly notified and mobilized to address the issue effectively. Following resolution of a security incident, we conduct a thorough post-incident analysis to identify root causes and lessons learned. The analysis undergoes thorough review, is disseminated company-wide, and includes actionable items aimed at enhancing detection and prevention mechanisms for similar incidents in the future.

Eheadshots.com will promptly notify you in writing upon confirmation of a security breach affecting our services that impacts your data. The notification will detail the breach and provide updates on our investigation into the matter.