Information Security Policy

Business Name: Meg AV Sales
Owner: AllRoundFix LLC
Effective Date: January 2026

1. Introduction

Meg AV Sales (“we,” “us,” or “our”) is committed to protecting the confidentiality, integrity, and availability of information belonging to our customers, partners, and business operations.

This Information Security Policy outlines the standards, safeguards, and responsibilities implemented to protect data processed through our ecommerce platform https://megaavsales.online.

This policy applies to all employees, contractors, systems, and third-party service providers involved in Meg AV Sales operations.

Meg AV Sales is owned and operated by AllRoundFix LLC, a company dedicated to delivering reliable products, transparent pricing, and a secure online shopping experience.

2. Our Security Commitment

We recognize the importance of protecting sensitive and personal information. Meg AV Sales is committed to:

• Safeguarding customer data from unauthorized access, alteration, or disclosure
• Maintaining secure systems, infrastructure, and network controls
• Using reputable third-party providers for secure payment processing
• Complying with applicable data protection and security regulations

3. Data Handling and Protection

3.1 Sensitive Information

Sensitive data processed through our platform may include:

• Personal identification details
• Contact information
• Order and transaction records
• Payment transaction references

Meg AV Sales does not store full payment card numbers (PAN), CVV codes, PINs, or magnetic stripe data on its systems.

All payment transactions are securely processed through PCI DSS–compliant third-party payment gateways.

3.2 Data Minimization

We collect and retain only the information necessary to:

• Process and fulfill orders
• Provide customer service and technical support
• Meet legal, tax, and accounting obligations

Information is not retained longer than required.

4. Access Control

To reduce risk of unauthorized access:

• System access is granted strictly on a need-to-know basis
• Unique user credentials are required
• Strong password standards are enforced
• Access rights are immediately revoked upon termination of employment or contract

5. Acceptable Use of Systems

Authorized users must:

• Use company systems only for legitimate business purposes
• Avoid installing unauthorized software or hardware
• Not attempt to disable or bypass security mechanisms
• Keep login credentials confidential

Meg AV Sales reserves the right to monitor and audit system activity to maintain security and compliance.

6. Network and Infrastructure Security

We implement reasonable technical and organizational safeguards, including:

• Firewalls and secure server configurations
• Anti-malware and antivirus protections
• Routine software updates and security patches
• Secure hosting infrastructure

Where appropriate, vulnerability assessments and security reviews are conducted.

7. Payment Security & PCI Compliance

Meg AV Sales relies on PCI DSS–compliant third-party payment processors.

• No sensitive authentication data is stored on our servers
• Cardholder data is transmitted securely using encryption protocols

8. Third-Party Service Providers

Third-party vendors that may process customer or transaction data are:

• Evaluated through appropriate due diligence
• Required to implement adequate security measures
• Bound by contractual obligations to protect information

9. Physical Security Measures

• Access to administrative systems and devices is restricted
• Business devices are secured against unauthorized use
• Any physical documents containing sensitive data are securely stored and destroyed when no longer required

10. Data Retention and Disposal

• Data is retained only for as long as necessary for business or legal purposes
• Electronic data is securely deleted when no longer needed
• Physical records are destroyed using secure disposal methods

11. Incident Response

Meg AV Sales maintains procedures to:

• Detect and respond to security incidents
• Contain and mitigate potential data breaches
• Notify affected parties where legally required
• Review and improve security controls following any incident

All suspected security events must be reported immediately to management.

12. Security Awareness and Training

• Employees receive security awareness guidance
• Users are trained to identify phishing, malware, and suspicious activity
• Compliance with this policy is mandatory

13. Policy Review and Updates

This Information Security Policy is reviewed periodically and updated when necessary to reflect:

• Technological advancements
• Changes in legal or regulatory requirements
• Updates in business operations

14. Contact Information

For inquiries regarding this Information Security Policy, please contact:

Business Name: Meg AV Sales
Owner: AllRoundFix LLC
Website: https://megaavsales.online
Phone: +1 (857) 397-0169
Email: support@megaavsales.online
Address: 670 River St, Hyde Park, MA 02136, United States