Protecting the data of our clients and their customers is core to how we work. This page summarises the safeguards we use. It complements our Privacy Policy, which explains what we collect and why.
Encryption in transit
Every site we build and host is served over HTTPS with modern TLS, so traffic between visitors and the site is encrypted. Our own properties, including this site and our client dashboard, are HTTPS-only.
Hosting and infrastructure
We deploy to reputable cloud and edge providers with strong physical and network security. Static, hand-coded sites reduce the attack surface — there is no database to breach and no plugin ecosystem to keep patched.
Access controls
Access to client systems and data is limited to the team members who need it, protected by strong authentication. We follow the principle of least privilege and remove access promptly when it is no longer required.
Client data handling
We collect only the data needed to deliver the work, keep it only as long as necessary, and hand over ownership of code, content, and data to the client. We do not sell client or visitor data.
Incident response
If a security incident affecting personal information occurs, we act quickly to contain it, assess the impact, and notify affected parties and regulators where required by law.
Your part
Security is shared. Please keep your account credentials confidential, use strong unique passwords, and let us know immediately if you suspect any unauthorised access.
Contact us
To report a security concern or ask about our practices, contact us: Mehrana Marketing, 120 Eglinton Ave E, Toronto, Ontario, Canada. Email info@mehrana.agency or call +1 (437) 992-6614.