Security

How we handle security on serpzenith.com, in plain terms rather than a wall of compliance jargon.

Encrypted connections

Every page on this site loads over HTTPS, meaning traffic between your browser and our server is encrypted in transit. Look for the padlock icon in your browser; if it’s ever missing on a page that should have it, tell us.

Payment security

We never see or store your full card number. Payments are processed directly by our payment gateway, which is PCI-DSS compliant, the industry standard for handling card data securely. That means a data breach on our end could never expose your raw card details, because we never hold them.

Account security

Passwords are stored using standard one-way hashing, not in plain text, so even we can’t see your actual password. We recommend a unique password for your account rather than reusing one from another site, and you can change your password any time from your dashboard.

Ongoing maintenance

The platform and plugins running this site are kept updated to patch known vulnerabilities as they’re discovered, and we monitor for unusual account activity rather than assuming a “set it and forget it” approach is enough.

Reporting a vulnerability

If you’ve found a genuine security issue, a way to access data you shouldn’t be able to, a flaw in checkout, an authentication bypass, tell us directly and responsibly at info@serpzenith.com before disclosing it publicly. We’ll investigate promptly and won’t threaten legal action against a good-faith report.

What this page isn’t

This is a plain description of real practices, not a claim of a specific third-party security certification we haven’t earned. If that changes, we’ll update this page to say so specifically rather than implying more than is true.

Backups

The site is backed up regularly so that a technical failure doesn’t mean losing your order history or account data. Backups themselves are stored securely and aren’t a workaround for the access controls that protect your live data.