1. Encrypted connection (SSL / HTTPS)
The entire Al Masa Garage website is served over HTTPS with a valid SSL/TLS certificate. All requests are automatically redirected from HTTP to HTTPS, so any data you submit through our forms is encrypted in transit.
2. Customer data protection
- Customer enquiries are stored on secure cloud infrastructure within reputable providers.
- Access to customer data is limited to authorised Al Masa Garage staff who need it to deliver the requested service.
- Customer data is never sold, rented, or shared with third parties for marketing purposes.
- We retain customer data only for as long as needed for legitimate business and legal purposes.
3. Restricted administrative access
- The website administration area is protected by strong authentication.
- Administrative privileges are granted on a least-privilege basis.
- Administrative sessions time out automatically after a period of inactivity.
4. Security monitoring
- We monitor the website for unusual activity, abusive traffic, and known attack patterns.
- Spam protection is in place on public forms to deter automated abuse.
- Software dependencies are kept up to date so known vulnerabilities are patched promptly.
5. Backups
Site content and customer enquiry data are backed up on a regular schedule so that we can recover quickly in the event of an incident.
6. Reporting a security issue
If you believe you have found a security vulnerability on this website, please report it to us privately so we can investigate and resolve it. Please do not publicly disclose the issue until we have had a chance to address it.
- Security contact email: support@almasagarage.com
- Subject line: "Security report — almasagarage.com"
We aim to acknowledge security reports within 5 working days.