Security Policy

1. Security Principles

US Travel Tour prioritizes customer personal information and data security, adhering to the following security principles:

• Ensuring confidentiality, integrity, and availability of customer information
• Application of latest security technologies and standards
• Continuous security monitoring and improvement
• Regular security training for employees

2. Data Protection Measures

a. Technical Protection Measures

• Encryption: Data transmission encryption using SSL/TLS protocols
• Access Control: Only authorized employees can access personal information
• Firewall: Operation of firewalls to block external intrusions
• Malware Protection: Anti-virus software running at all times
• Backup: Regular data backups

b. Administrative Protection Measures

• Minimization of employees handling personal information
• Regular security training for employees
• Maintenance and review of access records to personal information processing systems
• Establishment of security incident response plan and regular inspections

c. Physical Protection Measures

• Access control to storage rooms and server rooms
• Locked storage of documents containing personal information

3. Payment Information Security

Payment information is processed securely as follows:

• Compliance with PCI DSS (Payment Card Industry Data Security Standard)
• Credit card information is not stored on our servers
• Secure payment processing through certified payment processors
• Payment information transmission via SSL encryption

4. Security Incident Response

In the event of a security incident, we respond as follows:

1. Immediate Action: Prevent spread of breach immediately upon detection
2. Cause Analysis: Identify cause and scope of damage
3. Customer Notification: Promptly notify affected customers
4. Prevention: Improve systems to prevent recurrence
5. Agency Reporting: Report to relevant agencies as required by law

5. User Security Recommendations

We recommend the following for your information security:

• Use strong passwords (combination of letters, numbers, special characters)
• Change passwords regularly
• Log out after using public computers
• Be cautious of suspicious emails or links
• Be careful with emails containing personal information

6. Cookies and Tracking Technologies

We use cookies to improve our services:

• Essential Cookies: Provide basic website functions
• Functional Cookies: Save language and accessibility settings
• Analytics Cookies: Analyze website usage patterns (anonymized)

You can refuse cookies through your browser settings, but some services may be limited.

7. Security Contact

For security inquiries or vulnerability reports, please contact: