Website security

Server / System Security

We have dedicated servers for our services and our systems are updated every week with the latest security patches. All the Work+Family Solutions servers undergo server hardening - ensuring their strength against malicious attacks. We are PCI DSS compliant; which basically means we follow recommended steps to reduce credit card fraud. Each quarter we carry out vulnerability tests to ensure server security.

Transfer / Transaction security

Our service websites use Hypertext Transfer Protocol Secure (HTTPS) for sensitive pages, which is a combination of Hypertext Transfer Protocol (HTTP) with SSL/TLS protocol. It provides encrypted communication and secure identification of a network web server. We use Opayo as a trusted partner for processing payments; they are fully approved as a Level 1 compliant provider under the Payment Card Industry Data Security Standard (PCI DSS).

Monitoring / alert systems

Our servers are monitored at all times to ensure our different websites and services are up and running. We have an alert management system which immediately informs us should things go wrong so that quick action can be taken.

Disaster recovery / backup plan

We run backup servers and have a documented disaster recovery plan to ensure services are up and running as soon as possible in the unlikely event of an issue occurring.

Information supplied

Only required information is gathered from the users of our services, and they supply the information we store. Users have the ability to change and update this information, therefore they remain in control of their information.

Employees

All employees undergo interview, reference check and DBS disclosure (Work+Family Solutions, part of Bright Horizons). Our select team who processes or uses customer information for providing our service, must first under-go training on data protection and in using our system.