Security Policy
Last Updated: June 22, 2026
Dealhypehouse is committed to protecting the security of our platform, our users' data, and the systems that support our educational services. This Security Policy describes the measures we take to safeguard information and outlines the responsibilities of both Dealhypehouse and its users in maintaining a secure environment.
1. Scope
This policy applies to all systems, services, and infrastructure operated by Dealhypehouse, including our website at dealhypehouse.com, our online learning platform, communication tools, and any associated services made available to students, instructors, and administrators.
2. Data Protection and Encryption
2.1 Data in Transit
All data transmitted between users and our platform is encrypted using industry-standard Transport Layer Security (TLS). We enforce HTTPS across all pages and services to prevent interception or tampering during transmission.
2.2 Data at Rest
Sensitive data stored on our servers is encrypted using strong encryption algorithms. This includes personal account information, payment details, and session records associated with learning activity.
2.3 Payment Security
Payment transactions are processed through third-party payment providers that comply with the Payment Card Industry Data Security Standard (PCI DSS). Dealhypehouse does not store full payment card numbers or sensitive authentication data on its own servers.
3. Access Controls
3.1 Internal Access
Access to production systems and user data is restricted to authorised personnel only. Access rights are granted on a least-privilege basis, meaning staff members receive only the level of access necessary to perform their role.
3.2 Authentication
Administrative access to internal systems requires multi-factor authentication (MFA). All access sessions are logged and subject to periodic review.
3.3 User Accounts
User accounts are protected by password-based authentication. Passwords are stored using one-way cryptographic hashing with salting. Users are encouraged to choose strong, unique passwords and to enable any available account security features.
4. Infrastructure Security
4.1 Hosting and Network
Our platform is hosted on infrastructure that provides physical and network-level security controls, including firewalls, intrusion detection systems, and network segmentation. Servers are located in facilities with restricted physical access.
4.2 Vulnerability Management
We conduct regular vulnerability assessments and apply security patches in a timely manner. Critical patches are prioritised and applied as soon as practicable after release.
4.3 Monitoring and Logging
System activity, access logs, and security events are monitored continuously. Anomalous behaviour triggers alerts that are reviewed by responsible personnel. Logs are retained for a defined period to support incident investigation.
5. Application Security
Our development practices incorporate security at each stage of the software development lifecycle. This includes:
- Code review processes that include security considerations
- Input validation and output encoding to protect against injection attacks
- Protection against common web vulnerabilities including cross-site scripting (XSS) and cross-site request forgery (CSRF)
- Dependency management to identify and remediate known vulnerabilities in third-party libraries
- Staging environments used for testing before changes are deployed to production
6. Incident Response
6.1 Detection and Containment
In the event of a suspected or confirmed security incident, our team follows a defined incident response process. This includes identifying and containing the threat, assessing the scope of impact, and restoring normal operations as quickly as possible.
6.2 Notification
Where a security incident results in unauthorised access to personal data, we will notify affected users and relevant authorities as required by applicable obligations. Notifications will include a description of the incident, the type of data involved, and the steps we are taking in response.
6.3 Post-Incident Review
Following any significant security event, we conduct a post-incident review to identify root causes and implement improvements to prevent recurrence.
7. Third-Party Services
We work with third-party service providers to deliver certain features of our platform, including payment processing, video conferencing, and cloud infrastructure. We evaluate these providers against security criteria before engagement and require that they maintain appropriate security standards. We are not responsible for the independent security practices of third-party platforms accessed via external links.
8. User Responsibilities
Users of the Dealhypehouse platform share responsibility for maintaining security. Users are expected to:
- Use strong, unique passwords for their accounts and not share login credentials
- Log out of their accounts when using shared or public devices
- Keep their contact and account information accurate and up to date
- Report any suspicious activity, unauthorised access, or potential vulnerabilities promptly
- Refrain from attempting to probe, scan, or test the security of the platform without explicit written authorisation
9. Responsible Disclosure
We welcome reports from security researchers and users who identify potential vulnerabilities in our platform. If you believe you have discovered a security issue, please contact us at support@dealhypehouse.com before disclosing it publicly. We ask that you provide sufficient detail to allow us to reproduce and assess the issue. We commit to acknowledging reports promptly and working in good faith to address confirmed vulnerabilities.
We request that reporters refrain from accessing, modifying, or deleting user data, disrupting our services, or publicly disclosing the issue before we have had a reasonable opportunity to respond.
10. Business Continuity and Backups
We maintain regular backups of platform data and critical system configurations. Backups are stored securely and tested periodically to verify that data can be restored in the event of loss or corruption. Our continuity planning is designed to minimise service disruption in the event of a significant failure.
11. Employee Security Practices
All staff members with access to platform systems or user data are subject to security awareness training. This training covers topics including phishing awareness, secure handling of data, and the proper use of internal tools. Access privileges are reviewed when roles change and revoked promptly upon departure.
12. Policy Review
This Security Policy is reviewed periodically and updated as necessary to reflect changes in our practices, technology, or applicable requirements. The date at the top of this document indicates when the policy was last revised. Continued use of our platform following any update constitutes acceptance of the revised policy.
13. Contact
If you have questions about this Security Policy or wish to report a security concern, please contact us using the details below:
| Contact Method | Details |
|---|---|
| support@dealhypehouse.com | |
| Phone | +61 423 692 899 |
| Postal Address | 12 Alexandrina Dr, Yarralumla ACT 2600, Australia |