Security Policy

This Security Policy describes the measures MyQCart™ takes to protect the confidentiality, integrity, and availability of Client and end-user data within the MyQCart POS Services. MY QCART is the trading division of ORVIK Group LTD (London WC2H 9JQ, United Kingdom).

1. Double Accounting Entry & Encryption

• Double Accounting Entry Core: Every sale, tender tender, refund, and shift closure enforces balanced debits and credits in immutable logs, preventing cashier fraud and financial tampering.
• All data transmitted between Client devices and MyQCart services is encrypted in transit using industry-standard TLS (Transport Layer Security), version 1.2 or higher.
• Sensitive credentials and authentication data are stored using secure one-way hashing algorithms.
• Payment processing is handled by PCI DSS compliant third-party payment processors.

2. Password and Authentication Controls

• User accounts require passwords meeting minimum complexity requirements.
• Passwords are stored using secure, one-way cryptographic hashing.
• All web forms incorporate Cross-Site Request Forgery (CSRF) tokens.
• Database queries utilize strictly parameterised SQL statements.

3. Role-Based Access Controls (RBAC)

• Client accounts include role-based permissions, allowing store managers to control which staff can access reporting, discounts, or configuration.
• Access to internal data is restricted strictly to authorized technical personnel.

4. Backups (Optional Daily Cloud Backup)

• Automated daily cloud backup is available as an optional feature as per customer requirements.
• Backup data is encrypted and stored in secure offsite repositories.

5. Vulnerability Management & 24/7 Support

• Software dependencies and systems are patched continuously with zero cashier downtime.
• We welcome responsible disclosure — please report any suspected issue directly to support@myqcart.com or WhatsApp +44 7723 353557.

6. Network and Infrastructure Security

• Hosting infrastructure is protected behind secured firewalls and intrusion prevention monitoring.

7. Incident Response

• We maintain rapid response procedures to investigate and mitigate security events promptly.
• Clients are notified without undue delay in accordance with UK GDPR.

8. Client Responsibilities

Security is a shared responsibility. Clients are responsible for keeping passwords confidential, securing physical counter terminals, and assigning appropriate user permissions.

9. Security Reviews

MyQCart periodically reviews security practices and double-entry reconciliation mechanisms.

10. Business Continuity

MyQCart maintains disaster recovery protocols designed to ensure continuous retail business continuity.

11. Governing Law

This Security Policy shall be governed by the laws of England and Wales.

12. Changes to Policy

We may update this Security Policy from time to time. Continued use of the Services constitutes acceptance.

13. Contact Us