Effective Date
This Security Policy (“Policy”) governs the security practices, standards, responsibilities, and controls implemented by Chekpros.com (“Chekpros,” “Company,” “we,” “our,” or “us”) to protect its systems, applications, infrastructure, networks, information assets, and users.
This Policy applies to all users, including freelancers, employers, businesses, organizations, agencies, vendors, contractors, enterprise customers, employees, consultants, and third-party service providers who access, use, process, transmit, store, or otherwise interact with Chekpros.com and its related services.
By accessing or using Chekpros.com, users acknowledge that they have read, understood, and agreed to comply with this Security Policy together with all other applicable policies maintained by Chekpros.
- Purpose of This Policy
The purpose of this Security Policy is to:
- Protect the confidentiality, integrity, and availability of information.
- Safeguard users and business operations.
- Maintain platform reliability.
- Reduce cybersecurity risks.
- Prevent unauthorized access.
- Detect and respond to security incidents.
- Support regulatory compliance.
- Promote a culture of security and trust.
Security is an ongoing process, and Chekpros continuously evaluates and improves its security practices.
- Scope
This Policy applies to:
- Website applications
- Mobile applications
- APIs
- Databases
- Cloud infrastructure
- Internal systems
- Communication channels
- Customer information
- Business information
- Third-party integrations
- Employees and contractors
- Vendors and service providers
Security controls apply regardless of location or method of access.
- Security Principles
Chekpros is committed to maintaining:
Confidentiality
Protecting information from unauthorized disclosure.
Integrity
Protecting information from unauthorized alteration.
Availability
Ensuring systems remain accessible and operational.
Accountability
Maintaining logs, records, and audit trails.
Resilience
Preparing for and recovering from disruptions.
Continuous Improvement
Regularly reviewing and enhancing security measures.
- Information Assets
Information assets may include:
- User accounts
- Personal information
- Payment information
- Transaction records
- Communications
- Business records
- Source code
- Documentation
- Logs
- Infrastructure configurations
- Intellectual property
These assets are protected according to their importance and sensitivity.
- Access Control
Access to systems and information is restricted based upon legitimate business needs.
Security measures may include:
- Password requirements
- Role-based access controls
- Authentication mechanisms
- Session management
- Device security controls
- Permission limitations
Access rights may be granted, modified, or revoked as necessary.
- User Account Security
Users are responsible for:
- Protecting passwords.
- Maintaining confidentiality of credentials.
- Logging out of shared devices.
- Monitoring account activity.
- Reporting unauthorized access.
Users should avoid:
- Sharing passwords.
- Reusing weak passwords.
- Storing credentials insecurely.
Users remain responsible for activities performed under their accounts.
- Authentication Measures
Chekpros may implement:
- Multi-factor authentication
- Email verification
- Phone verification
- Session controls
- Device recognition
- Security notifications
Additional verification may be required where necessary to protect users and the Platform.
- Data Encryption
Chekpros may use industry-standard encryption technologies for:
- Data in transit
- Data at rest
- Password storage
- Sensitive communications
Encryption methods may evolve as technologies and standards develop.
- Network Security
Security measures may include:
- Firewalls
- Intrusion detection systems
- Intrusion prevention systems
- Network monitoring
- Traffic filtering
- Rate limiting
These controls are designed to reduce unauthorized access and malicious activity.
- Application Security
Chekpros seeks to maintain secure applications through:
- Secure coding practices
- Software testing
- Vulnerability assessments
- Patch management
- Dependency monitoring
- Continuous updates
Security improvements are implemented as necessary.
- Cloud Security
Where cloud infrastructure is utilized, reasonable measures may include:
- Secure configurations
- Redundancy mechanisms
- Backup systems
- Encryption controls
- Access restrictions
- Monitoring procedures
Third-party cloud providers may maintain additional security controls.
- Payment Security
Payments may be processed by third-party payment providers.
Chekpros may implement reasonable measures to:
- Secure transactions
- Reduce fraud risks
- Protect account information
Chekpros does not store complete payment card information unless required and permitted by applicable laws and industry standards.
Payment processors maintain their own security responsibilities.
- Monitoring and Logging
Chekpros may maintain logs relating to:
- User activity
- System events
- Authentication attempts
- Errors
- Transactions
- Security incidents
Logs help:
- Investigate problems
- Detect suspicious activities
- Improve security
- Support compliance efforts
- Incident Response
Chekpros maintains procedures designed to:
- Identify security incidents.
- Investigate suspicious activities.
- Contain threats.
- Minimize damage.
- Restore operations.
- Document incidents.
Response procedures may vary depending on the nature and severity of the incident.
- Data Breach Management
Where required by law, Chekpros may:
- Investigate breaches.
- Assess risks.
- Notify affected individuals.
- Notify regulatory authorities.
- Implement corrective actions.
Notification timing depends on legal requirements and the circumstances involved.
- Vulnerability Management
Chekpros may:
- Conduct security reviews.
- Apply updates.
- Patch vulnerabilities.
- Improve configurations.
- Evaluate emerging threats.
Not all vulnerabilities can be eliminated immediately, but reasonable efforts are made to address identified risks.
- Malware Protection
Protective measures may include:
- Antivirus solutions
- Endpoint security
- Monitoring systems
- Software updates
- Threat detection mechanisms
Users are encouraged to maintain secure devices and environments.
- Third-Party Security
Chekpros may engage:
- Cloud providers
- Payment processors
- Vendors
- Service providers
- Infrastructure partners
While reasonable efforts are made to select reputable providers, third parties maintain independent systems and controls.
Chekpros cannot guarantee the security practices of independent third parties.
- Employee Security Responsibilities
Employees and contractors are expected to:
- Maintain confidentiality.
- Protect sensitive information.
- Follow internal procedures.
- Use authorized systems.
- Report suspicious activities.
Access may be restricted or revoked when no longer necessary.
- Physical Security
Reasonable safeguards may include:
- Restricted access
- Device protections
- Controlled environments
- Secure storage
Physical security controls may vary depending on infrastructure arrangements.
- Backups and Recovery
Chekpros may maintain:
- Backup systems
- Recovery procedures
- Redundancy measures
- Disaster recovery processes
Backup schedules and retention practices may vary based on operational requirements.
- Business Continuity
Chekpros seeks to maintain operational resilience through:
- Redundancy mechanisms
- Monitoring systems
- Recovery planning
- Incident procedures
Unexpected interruptions may still occur.
- Security Reporting
Users are encouraged to report:
- Account compromises
- Phishing attempts
- Fraudulent activity
- Vulnerabilities
- Suspicious behavior
Reports should be submitted promptly through official support channels.
- Prohibited Activities
Users may not:
- Attempt unauthorized access.
- Circumvent security controls.
- Interfere with systems.
- Spread malware.
- Exploit vulnerabilities.
- Conduct denial-of-service attacks.
- Reverse engineer systems.
- Access information without authorization.
Violations may result in suspension, termination, legal action, or cooperation with authorities.
- Compliance
Chekpros seeks to maintain compliance with applicable:
- Privacy laws
- Cybersecurity regulations
- Consumer protection laws
- Data protection requirements
Compliance efforts evolve with changing laws and standards.
- Limitation of Liability
Despite reasonable safeguards, no technology platform can guarantee absolute security.
To the fullest extent permitted by law, Chekpros shall not be liable for:
- Internet failures
- Third-party attacks
- Force majeure events
- User negligence
- External service interruptions
- Unauthorized activities beyond reasonable control
Users acknowledge that digital services involve inherent cybersecurity risks.
- Investigations
Chekpros reserves the right to investigate:
- Security incidents
- Suspicious activities
- Policy violations
- Fraud attempts
- Unauthorized access
Investigations may involve:
- Reviewing logs
- Restricting accounts
- Preserving records
- Cooperating with authorities
- Policy Changes
Chekpros reserves the right to modify this Policy to address:
- Emerging threats
- Legal requirements
- Technological developments
- Operational changes
Updated versions become effective upon publication unless otherwise required by law.
Continued use of the Platform constitutes acceptance of revised terms.
- Governing Law
This Security Policy shall be governed by and interpreted in accordance with the laws of the Federal Republic of Nigeria and any applicable international laws and regulations.
- Contact Information
Questions concerning this Security Policy, security incidents, or suspected vulnerabilities may be submitted through the official support channels available on Chekpros.com.
- Acknowledgment
By accessing or using Chekpros.com, users acknowledge that they understand that cybersecurity risks exist in all online environments and that no system can guarantee absolute protection.
Users further acknowledge that Chekpros implements reasonable security measures designed to protect its platform, systems, and information while continuously working to improve security and maintain a trusted marketplace environment.