At earnfromyourexperience.com, protecting our digital infrastructure and your personal records is a core priority. This Information Security Policy (ISP) details the rules, protective measures, and protocols we use to keep the Speak. Shoot. Sell. workshop data safe.
1.Core objective and scope
This policy outlines how we protect information assets against unauthorised modification, leakage, or sudden operational disruption. Its scope covers:
- Student identity records: Names, verified WhatsApp contact details, and email addresses.
- Proprietary training material: Training blueprints, video script workbooks, and resource slides built by Dr. Mansi Sehdev.
- Checkout records: Live database logs captured during checkout.
2.Data encryption standards
We apply encryption across our standard operations to block external interception:
- In-transit security: Every browser interaction on earnfromyourexperience.com is protected by standard Transport Layer Security (TLS/SSL) encryption.
- Data availability: Backups containing registration records are kept in managed storage to allow rapid restoration if unexpected database problems occur.
3.Access control and authorisation
We operate under strict minimum-privilege rules:
- Internal restrictions: Access to backend dashboards or CSV registration files is restricted to active administrators who handle workshop onboarding.
- Authentication: All admin areas require secure authentication to block brute-force attempts on our administration controls.
4.Payment gateway protection
We enforce clear barriers around your transaction security:
- Zero raw card storage: No card details, net-banking passwords, or UPI PINs are processed or held on our servers. All transactions route directly through PCI-DSS certified payment providers.
5.Threat detection and incident response
If an unusual connection attempt or potential data risk is flagged by our server protection:
- Isolation: Affected services or scripts are contained immediately to prevent wider impact.
- Communication: In the rare event of a confirmed security compromise, we will alert affected workshop registrants through their primary email address within standard regulatory time windows.
6.User responsibilities and system hygiene
Security is a shared commitment. As a workshop participant, you agree to follow these protective actions:
- Link protection: Do not post your personal Zoom entry links or dashboard login links in unverified public messaging groups.
- Group manners: Do not share unauthorised executable files or suspicious tracking links in our official WhatsApp community.