Security & privacy
Your information deserves careful handling.
Know where to share documents, what to keep out of messages and how to ask for help.
A private place for documents
When document upload is enabled, it is available only inside an authenticated client request. Uploaded files are encrypted using AES-256-GCM and stored in a configured directory outside the website’s public document roots. Every download checks your account access and a request-specific security token.
Keep sensitive details out of enquiries
Do not put passport or tax ID numbers, passwords, bank details or card information in contact forms, messages, email or WhatsApp. The team identifies which documents are needed for the agreed filing. Never share another service’s password or verification code.
What is retained
Client uploads are scheduled for deletion after the request is marked complete, using the retention period stated in the upload area. Completed work is handled separately so it can remain available in the client area. Deletion from the active site does not describe a host’s independent backup retention; contact the team with a deletion request.
Account and payment protection
WordPress manages account passwords and password resets. Choose a unique password, keep account email access secure and sign out on shared devices. Where online payment is available, an installed payment provider handles card processing; do not send card details through a message.
Ask about a concern
Use the published contact route to report a security concern. Describe the issue without attaching private documents or accessing information that belongs to someone else. Security controls reduce risk but cannot guarantee that every system will remain free of incidents.
Your business deserves a clear next step.
Tell us where you are today. We’ll help you organise what comes next.