PCI Compliance Statement

Chain Reaction PCI Compliance Statement - Shopify as a Third-Party Processor

At Chain Reaction Bicycles, we utilize Shopify as our third-party processor to handle the payment processing and security aspects of our e-commerce website. We understand the critical importance of maintaining a secure environment for online transactions and ensuring the protection of our customers' payment card information. Therefore, we want to assure our customers that Shopify maintains a high level of PCI compliance to safeguard sensitive data.

Shopify, as a leading e-commerce platform, has implemented robust security measures to comply with the Payment Card Industry Data Security Standard (PCI DSS). Their compliance efforts include the following:

  1. Network Security:

    • Shopify maintains a secure network infrastructure, utilizing industry-standard firewalls and network segmentation to protect against unauthorized access.
    • They continuously monitor their network for any potential vulnerabilities and take prompt action to address them.

  2. Protection of Cardholder Data:

    • Shopify ensures that all cardholder data transmitted between their servers and our e-commerce website is encrypted using strong encryption protocols, such as Transport Layer Security (TLS).
    • They employ industry-accepted encryption standards to securely store cardholder data, ensuring it remains protected at rest.

  3. Vulnerability Management:

    • Shopify regularly performs vulnerability scans and penetration testing to identify and address any potential security vulnerabilities in their systems.
    • They promptly remediate any identified vulnerabilities to maintain a secure environment for our customers' transactions.

  4. Access Control:

    • Shopify implements strong access controls to restrict access to cardholder data to authorized personnel only.
    • They enforce strict authentication measures and require unique user credentials, implementing two-factor authentication where appropriate.
    • Their access controls are regularly reviewed and audited to ensure compliance with PCI DSS requirements.

  5. Security Incident Response:

    • Shopify has a well-defined incident response plan in place to promptly address any security incidents that may occur.
    • They maintain logs and records of security events and conduct ongoing monitoring and analysis to detect and respond to potential breaches.
    • In the event of a security incident, Shopify follows appropriate incident response procedures and will notify relevant parties, including us as their merchant, as necessary.

  6. Compliance Validation:

    • Shopify engages independent third-party assessors to perform regular audits and penetration testing to validate their compliance with PCI DSS.
    • They obtain industry-recognized certifications to demonstrate their commitment to security, including Payment Card Industry (PCI) Level 1 Service Provider Certification.

By utilizing Shopify as our trusted third-party processor, we can leverage their robust security infrastructure and PCI compliance efforts to enhance the security of our customers' payment card information. Shopify's dedication to maintaining a secure environment aligns with our commitment to providing a safe and reliable e-commerce experience.

For more information about Shopify's security practices and their PCI compliance statement, please visit their website or contact their support team directly.

https://www.shopify.com/security/pci-compliant

https://help.shopify.com/en/support/compliance/reports