This Security Statement describes the technical and organizational measures implemented by LLC Beauty Vision to ensure the security of www.mashkskincare.am, its server infrastructure, and customer data.
These measures comply with the requirements of Armenian financial institutions and the Law of the Republic of Armenia.

1. Secure Server Infrastructure
Our website is hosted on a secure server with:

• firewall protection,
• DDoS attack mitigation,
• enforced access control,
• regular security monitoring,
• automated system updates.

Only authorized personnel have access to the server infrastructure.

2. Data Encryption & SSL/TLS
All data transmitted between the user and the website is encrypted using SSL/TLS security protocols.
The Website uses:

• HTTPS secure connection,
• an active SSL certificate,
• encrypted communication channels.

This ensures full protection of personal data during transmission.

3. Access Restriction & Authentication
Access to the server and administrative panels is strictly limited and protected by:

• multi-factor authentication (MFA),
• IP restrictions (admin access only from approved locations),
• role-based user access levels.

Unauthorized access attempts are monitored and blocked.

4. Payment Security
We do not store full card numbers or sensitive banking information.
All online transactions are processed through licensed Armenian payment providers that comply with:

• PCI DSS (Payment Card Industry Data Security Standard),
• Armenian banking security requirements.

Payment information is transmitted only through encrypted channels.

5. Data Protection & Storage
We apply the following security measures:

• encrypted data storage (where applicable),
• regular backups stored on secure servers,
• protection against brute-force and injection attacks,
• secure password policies,
• anti-malware and intrusion detection tools.

Customer information is never shared with unauthorized parties.

6. System Monitoring & Incident Response
The website and server undergo:

• continuous monitoring,
• logging of suspicious activity,
• automated alerts for irregularities.

In case of any suspected breach, we follow an internal incident response protocol:

1. immediate investigation,
2. containment,
3. remediation,
4. reporting (if required by law).

7. Compliance with Armenian Legislation
All data processing, security procedures, and website operation comply with:

• the Law of the Republic of Armenia “On Personal Data Protection”,
• the Law of the Republic of Armenia “On Electronic Communication”,
• requirements of Armenian banks and payment systems.

8. Contact Information
If you have any questions regarding security:
LLC Beauty Vision
Email: beautyvision.int@gmail.com
Phone: +374 33 259 416