Privacy policy

Vision and Philosophy

Jason Adrenalin puts securing our customers’ personal data as one of the company’s highest priorities. We understand that every time a customer provides us with credit card and bank account information, or other sensitive personally identifying information, they trust that we will protect it—and this policy is designed to ensure that this trust is not misplaced. The foundation of our information security program is a set of strong policies that are in balance with business operational needs.

Security Environment

Jason Adrenalin utilizes customer data to deliver products and services to our customers. Accordingly, all customer information to include cardholder data as well as other sensitive customer and company information, will be protected by all staff, contractors, partners and services providers in accordance with well-defined policies and procedures. Jason Adrenalin will operate on the security principle of “that which is not explicitly allowed is explicitly denied.”

Storage and Destruction

Confidential information such as customer addresses, bank account numbers, and credit card numbers will not be made available outside of Jason Adrenalin and vendors that process financial transactions on behalf of Jason Adrenalin. Exceptions may be made in cases brought by state and federal authorities. When confidential information in paper form need no longer be stored for any operational or regulatory reason, it will be disposed of (shredding or incineration). Mailed transactions are entered into the system, and the paper authorization form is stored in a limited access area for only as long as required by business operational needs.

Vendor Management

Vendors will be required to comply with the same standards established for Jason Adrenalin staff. All vendors that will have access to confidential information, including customer Credit Card numbers and Bank Account numbers, must be covered by a formal contract that includes the following guarantees:

Service providers must comply with all PCI DSS requirements, and maintain and provide proof of PCI DSS certification as a service provider. Service providers must acknowledge responsibility for security of the cardholder data they possess, to protect cardholder data as specified by the PCI DSS, if processing or storing payment card data on behalf of Jason Adrenalin.

As part of the Vendor Management program, Jason Adrenalin will perform due diligence on each Vendor prior to signing any contract to confirm that the above guarantees have been adequately met.