Effective Date
This Information Security Policy (“Policy”) establishes the principles, standards, responsibilities, and practices adopted by Chekpros.com (“Chekpros,” “Company,” “we,” “our,” or “us”) for protecting information assets, technology resources, systems, applications, and data used in connection with the operation of the Platform.
This Policy applies to all users, employees, contractors, vendors, consultants, enterprise customers, freelancers, employers, service providers, and third parties that access, process, transmit, store, manage, or otherwise interact with information associated with Chekpros.
By accessing or using Chekpros.com, users acknowledge that they have read, understood, and agreed to comply with this Policy and all other applicable policies maintained by Chekpros.
- Purpose
The purpose of this Information Security Policy is to:
- Protect the confidentiality of information.
- Preserve the integrity of systems and data.
- Maintain the availability of services.
- Reduce security risks.
- Support regulatory compliance.
- Promote secure business operations.
- Protect users and stakeholders.
- Encourage continuous improvement.
Security is a shared responsibility among all parties interacting with the Platform.
- Objectives
The objectives of this Policy are to:
- Safeguard information assets.
- Prevent unauthorized access.
- Reduce cybersecurity threats.
- Support business continuity.
- Encourage responsible use of technology.
- Promote accountability.
- Strengthen operational resilience.
- Support trust and transparency.
- Scope
This Policy applies to:
- Websites
- Mobile applications
- APIs
- Databases
- Servers
- Cloud infrastructure
- Networks
- Software applications
- User information
- Business information
- Communication systems
- Vendors and service providers
- Employees and contractors
Information security requirements apply regardless of location or method of access.
- Information Security Principles
Chekpros seeks to maintain the following principles:
Confidentiality
Information should only be accessible to authorized persons.
Integrity
Information should remain accurate, reliable, and protected from unauthorized alteration.
Availability
Systems and information should remain reasonably accessible when needed.
Accountability
Actions affecting information assets should be traceable where appropriate.
Risk Management
Security risks should be identified and managed using reasonable practices.
Continuous Improvement
Security practices should evolve in response to changing threats and technologies.
- Information Assets
Information assets may include:
- Personal data
- User accounts
- Transaction records
- Communications
- Source code
- Software
- Databases
- Documentation
- Logs
- Business plans
- Intellectual property
- Financial information
Information assets shall be protected according to their sensitivity and importance.
- Information Classification
Information may be categorized as:
Public Information
Information approved for public disclosure.
Internal Information
Information intended for internal use only.
Confidential Information
Sensitive information requiring restricted access.
Restricted Information
Highly sensitive information requiring enhanced protection.
Protection measures may vary depending on the category involved.
- Access Control
Access to information shall be limited to authorized individuals based on legitimate business needs.
Controls may include:
- User authentication
- Password policies
- Role-based permissions
- Session controls
- Access reviews
- Device restrictions
Access rights may be granted, modified, suspended, or revoked as necessary.
- User Responsibilities
Users are responsible for:
- Protecting account credentials.
- Maintaining device security.
- Using secure passwords.
- Reporting suspicious activities.
- Avoiding unauthorized disclosures.
Users remain responsible for activities occurring through their accounts.
- Password Security
Users should:
- Use strong passwords.
- Avoid sharing passwords.
- Avoid password reuse.
- Protect authentication credentials.
Chekpros may implement additional authentication mechanisms where necessary.
- Authentication Controls
Security measures may include:
- Multi-factor authentication
- Email verification
- Session monitoring
- Device recognition
- Access restrictions
Additional controls may be implemented to address evolving risks.
- Data Protection
Chekpros seeks to protect information using reasonable administrative, technical, and organizational safeguards.
Such safeguards may include:
- Encryption technologies
- Access restrictions
- Monitoring mechanisms
- Backup procedures
- Security reviews
Absolute security cannot be guaranteed.
- Encryption
Sensitive information may be protected using encryption technologies during:
- Transmission
- Storage
- Backup operations
Encryption methods may evolve as industry standards change.
- Network Security
Security controls may include:
- Firewalls
- Traffic filtering
- Intrusion detection systems
- Intrusion prevention systems
- Monitoring mechanisms
- Rate limiting
These controls are designed to reduce risks and unauthorized access.
- Application Security
Chekpros seeks to maintain secure software through:
- Secure development practices
- Code reviews
- Software updates
- Dependency management
- Vulnerability assessments
Applications are continuously improved where feasible.
- Change Management
Changes affecting systems and infrastructure may be evaluated to minimize:
- Service disruptions
- Security risks
- Data integrity issues
Updates and improvements may be implemented periodically.
- Security Monitoring
Chekpros may maintain monitoring mechanisms designed to:
- Detect suspicious activities
- Investigate incidents
- Improve reliability
- Support compliance
Monitoring practices may evolve over time.
- Logging and Records
Logs may include:
- Authentication events
- Transactions
- System errors
- User activities
- Security events
Logs assist in:
- Troubleshooting
- Investigations
- Security analysis
- Compliance efforts
Retention periods may vary.
- Incident Management
Chekpros maintains procedures intended to:
- Detect incidents
- Investigate suspicious events
- Limit damage
- Restore operations
- Document findings
Response procedures depend on the nature and severity of incidents.
- Data Breach Response
Where required by applicable laws, Chekpros may:
- Investigate incidents
- Assess risks
- Notify affected users
- Notify authorities
- Implement corrective actions
Timing and scope of notifications depend on applicable laws and circumstances.
- Backups
Chekpros may maintain backup systems to support:
- Data recovery
- Service continuity
- Disaster recovery efforts
Backup schedules and retention periods may vary.
- Business Continuity
Chekpros seeks to maintain operational resilience through:
- Redundant systems
- Recovery procedures
- Backup mechanisms
- Incident response processes
Unexpected interruptions may still occur.
- Physical Security
Reasonable physical safeguards may include:
- Restricted access
- Device protection
- Controlled environments
- Equipment safeguards
Physical controls may vary depending on infrastructure arrangements.
- Vendor Security
Third-party service providers may include:
- Cloud providers
- Payment processors
- Infrastructure providers
- Software vendors
Chekpros seeks to engage reputable vendors and may require reasonable security standards where appropriate.
Third parties maintain independent responsibilities for their own systems.
- Employee and Contractor Responsibilities
Employees and contractors are expected to:
- Maintain confidentiality.
- Follow security procedures.
- Protect sensitive information.
- Report incidents.
- Use authorized systems.
Access may be restricted or revoked when no longer required.
- Remote Access
Remote access to systems may be subject to:
- Authentication controls
- Access limitations
- Monitoring mechanisms
- Device security requirements
Security requirements may evolve over time.
- Acceptable Use
Users may not:
- Circumvent security controls.
- Access information without authorization.
- Distribute malicious software.
- Attempt unauthorized system access.
- Interfere with services.
- Abuse technology resources.
Violations may result in account restrictions, termination, legal action, or cooperation with authorities.
- Risk Management
Chekpros seeks to identify and manage risks associated with:
- Cyber threats
- Human error
- Third-party dependencies
- Technology failures
- Fraud
- Data breaches
Risk management practices evolve based on operational needs and emerging threats.
- Regulatory Compliance
Chekpros seeks to comply with applicable laws and regulations relating to:
- Privacy
- Cybersecurity
- Consumer protection
- Data protection
- Information security
Compliance requirements may change over time.
- Investigations
Chekpros reserves the right to investigate:
- Security incidents
- Unauthorized access
- Policy violations
- Fraudulent activity
- Abuse of systems
Investigations may involve:
- Reviewing logs
- Restricting access
- Preserving evidence
- Cooperating with authorities
- Third-Party Disclosures
Information may be disclosed where necessary:
- To service providers
- To comply with legal obligations
- To protect users and systems
- To prevent fraud
- To enforce policies
Disclosures shall be subject to applicable laws and contractual obligations.
- Limitation of Liability
Despite reasonable efforts, no security system is immune from risks.
To the fullest extent permitted by law, Chekpros shall not be liable for:
- Cyberattacks
- Third-party failures
- Internet disruptions
- User negligence
- External events beyond reasonable control
Users acknowledge that cybersecurity risks are inherent in digital environments.
- Policy Updates
Chekpros reserves the right to modify this Policy in response to:
- Technological developments
- Operational changes
- Legal requirements
- Emerging threats
Updated versions become effective upon publication unless otherwise required by law.
Continued use of the Platform constitutes acceptance of revised terms.
- Governing Law
This Information Security Policy shall be governed and interpreted in accordance with the laws of the Federal Republic of Nigeria and other applicable laws and regulations.
- Contact Information
Questions concerning this Information Security Policy, security concerns, or suspected incidents may be submitted through the official support channels available on Chekpros.com.
- Acknowledgment
By accessing or using Chekpros.com, users acknowledge that they understand that information security is a shared responsibility and that no technology system can provide absolute protection.
Users further acknowledge that Chekpros seeks to implement reasonable security practices designed to protect information assets, maintain operational resilience, and support a secure and trusted marketplace environment.