Quick Actions

• View Full Profile
• Recent Activity
• Contact Me

Data & Access Control

• Encrypted storage — all client images and briefs are stored on encrypted drives with restricted access.
• Role-based permissions — only the project lead and assigned editor can view or modify active files.
• Two-factor authentication — required for all cloud-based project management and delivery platforms.
• Regular audits — access logs are reviewed monthly to detect any unauthorised activity.

Payment & Transaction Security

• PCI-compliant processors — all payments are handled by third-party gateways that meet current security standards.
• No card data stored — we never retain credit card numbers or banking details on our servers.
• Invoicing via secure portal — invoices and payment links are sent through encrypted channels only.
• Fraud monitoring — unusual transaction patterns are flagged and reviewed within 24 hours.

Incident Response Plan

• Immediate containment — if a breach is suspected, affected systems are isolated within minutes.
• Client notification — impacted clients are informed within 48 hours with a clear summary of actions taken.
• Forensic review — an external security consultant is engaged to identify the root cause and prevent recurrence.
• Post-incident update — all protocols are revised after each incident to close any gaps.

Physical & Device Security

• Locked equipment storage — all cameras, laptops, and hard drives are stored in a secure, access-controlled office.
• Remote wipe capability — company devices can be remotely erased if lost or stolen.
• VPN required on location — when working from client sites or public networks, all data transfers go through a company VPN.
• Annual security training — every team member completes a refresher course on phishing, password hygiene, and data handling.