Security
How we keep your data and your business secure.
Data protection
We use industry-standard measures to protect personal data in transit and at rest, including TLS for web traffic and access controls on production systems. Access to customer and lead data is limited to authorised staff and systems that need it.
Infrastructure
Comet and related services run on reputable cloud infrastructure with encryption, monitoring and regular backups. Where we use sub-processors (hosting, email, form delivery), we select providers with appropriate security practices. See our Data Processing terms for customer processing.
Access control
You control who can access your Plutoo Comet account. Use strong unique passwords, limit staff access to what they need, and revoke access promptly when people leave. We recommend enabling any available multi-factor options for privileged users.
Application security
- Role-based access within the product where configured
- Spam and abuse protections on public forms (including optional reCAPTCHA)
- Ongoing dependency and configuration hygiene for services we operate
Breach notification
If a personal data breach affecting you is confirmed, we will assess it and notify you and/or the ICO where required by UK GDPR, without undue delay and in line with our customer agreements.
Reporting issues
If you believe you have found a security issue, email [email protected] with details so we can investigate promptly. Please do not publicly disclose vulnerabilities before we have had a reasonable chance to address them.
Related: Privacy Policy · Cookie Policy