Security
How this site is protected, in plain terms.
We never handle your card details. Payment is arranged by bank transfer, so no card number is ever typed into this website, transmitted by it, or stored in it. There is nothing here for a card thief to steal.
In transit
Every page and every request is served over HTTPS with modern TLS, enforced by HSTS so a browser will not fall back to an unencrypted connection.
At rest
- Order and contact data sits in a managed PostgreSQL database in Singapore, encrypted at rest.
- Access is governed by row-level security enforced by the database itself, not merely hidden in the interface. A request that should not see a record does not receive it, whatever route it arrives by.
- Order records are visible only to signed-in staff holding the relevant permission. They are not readable by anonymous visitors.
Staff access
- Every staff member has their own named account. There is no shared login.
- Accounts are issued with a single-use password that must be changed at first sign-in.
- Permissions are granular — viewing products, changing prices, adjusting stock and processing orders are separate grants, given only where the role requires them.
- Changes to products, prices, stock, orders and user accounts are written to an audit trail recording who did what and when.
Order links
The tracking link we send you is keyed to a long random identifier unique to your order, not to your order number. Order numbers run in sequence, so a link based on one would let anybody read other customers' orders by counting upward. Ours cannot be guessed that way.
What we ask of you
- Verify our bank details with us by phone before sending a large transfer. Fraudsters intercept messages and substitute account numbers — this is the single most common way money is lost in online purchases here.
- We will never ask you for a password, a card PIN, or an OTP. Anyone who does is not us.
- Keep your order tracking link private; anyone with it can view that order.
Reporting a vulnerability
If you believe you have found a security problem with this site, please tell us before telling anyone else. Write to us or call with enough detail to reproduce it. We will acknowledge you, investigate, and we will not pursue action against anyone who reports a genuine issue in good faith without accessing or altering other people's data.
Contact
Fine Tech Systems (Pvt) Ltd
312 Main Street, Negombo 11500, Sri Lanka
+94 77 123 4567 · sales@yourdomain.com