Information Security Policy

EMI Guard applies reasonable, industry-standard security safeguards to the information it processes. This page summarizes them at a plain-language level.

Access control

• Every retailer logs in with its own account; a retailer can only see its own customers, devices and payment records, never another retailer's.
• Each device authenticates with its own per-device token, not a shared password.
• Staff access to underlying systems is limited to what is needed to operate and support the platform.

Data in transit and at rest

Traffic between the app, the dashboard and the server is encrypted in transit (HTTPS/TLS). Data is stored on the servers used to run EMI Guard, with access restricted as described above.

Hosting and sub-processors

Where a third-party hosting or infrastructure provider is used to run EMI Guard, that provider is engaged under terms that require it to protect the data in line with applicable law, and is not authorized to use the data for its own purposes.

Incident and breach response

If a security incident is identified that affects personal information, EMI Guard will assess its scope, take steps to contain and remediate it, and notify affected retailers and, where required by applicable law, affected customers and the relevant authority, within the timeframe applicable law requires.

Retention and deletion

See the Data Retention Policy for how long each category of information is kept.

Last updated: 12 November 2026.