VivaValet - Trusted Services for Seniors logo
VivaValet - Trusted Services for Seniors logo

All articles

Data Security MeasuresUpdated 7 months ago

At VivaValet, we take data security seriously and are committed to protecting the personal information of our users. Operating in Illinois, we comply with state and federal data privacy laws, ensuring the highest standards of data protection.

Here’s how we safeguard your data:

1. Encryption Protocols

  • Data in Transit: We use secure SSL/TLS encryption to protect data when it is being transmitted between your device and our servers.
  • Data at Rest: All personal data stored on our servers is encrypted using advanced encryption algorithms to prevent unauthorized access.

2. Access Controls

  • Role-Based Access: Only authorized personnel with specific roles have access to sensitive data. We employ role-based access controls to limit who can view and edit personal information.
  • Multi-Factor Authentication (MFA): Access to our systems requires MFA, adding an extra layer of security to protect user accounts and internal data management.

3. Compliance with Illinois Data Protection Laws

  • Illinois Personal Information Protection Act (PIPA): VivaValet complies with PIPA, ensuring that any breach involving personal data is promptly reported and handled in line with state requirements.
  • Health Information Protections: For services that may involve health-related data, we adhere to relevant regulations such as HIPAA to ensure this information is handled securely and confidentially.

4. Regular Security Audits

  • We conduct regular security audits and vulnerability assessments to identify and address any potential weaknesses in our systems.
  • External security firms are engaged to perform penetration testing, ensuring that our defenses are up-to-date and robust.

5. Incident Response Plan

  • Immediate Action: In the event of a data breach, we have a comprehensive incident response plan that includes containment, mitigation, and recovery strategies.
  • User Notification: If a breach occurs that affects personal data, we promptly notify affected users and provide guidance on steps they can take to protect themselves.

6. User Data Control

  • Data Access Requests: Users can request access to their personal data, ask for corrections, or request deletion in compliance with privacy laws.
  • Data Retention Policies: Personal data is only retained as long as necessary to fulfill the purposes for which it was collected or as required by law.

7. Data Anonymization and Minimization

  • Where possible, we minimize the collection of personal data and anonymize it when full details are not necessary for service delivery.
  • This ensures that even in the unlikely event of a breach, personal information remains protected.

8. Third-Party Service Providers

  • We only work with trusted third-party service providers that comply with our strict data security standards. Each vendor is reviewed and vetted for compliance with applicable privacy laws and security measures.
  • Data Sharing Protections: When sharing data with service providers, we use encrypted channels and ensure that strict contractual agreements are in place to safeguard your information.

9. Regular Staff Training

  • All VivaValet employees undergo regular data protection training, ensuring they are equipped to handle personal information securely and in compliance with our policies.

10. Secure Communication

  • All communications between users and VivaValet’s customer service are conducted via encrypted channels, ensuring your conversations and personal details remain secure.

At VivaValet, your privacy and data security are our top priorities. If you have any questions or concerns about how we protect your data, feel free to contact us at [email protected].

Was this article helpful?
Yes
No