Security & data handling.

This page describes, in general terms, how Surfingvest handles the security of the information collected through this website. It is not a legal guarantee, a certification, or a description of sensitive infrastructure details.

Only the information reasonably necessary to manage each professional conversation, resource request or subscription is collected. Optional fields are never required to initiate a conversation.

Access to the administrative area of the website and to the records generated through it is restricted according to operational need, based on individually authorised accounts.

Administrative accounts authenticate through the platform’s authentication service. Passwords are stored and verified by the authentication provider using industry-standard techniques and are never exposed or shared outside that service.

Data is transmitted through encrypted connections where supported by the underlying service, using recognised transport-layer security.

Third-party providers used to operate the website are selected for professional purposes and are limited to processing information strictly required for those purposes. See the Privacy Policy for the current list of providers.

The managed platforms that support this website provide operational continuity features. Specific backup frequencies, retention windows and recovery objectives are handled by the underlying providers and are not detailed here.

Security incidents involving personal data are addressed in accordance with applicable data protection legislation. Where required, affected persons and competent authorities are notified.

Security concerns or suspected vulnerabilities can be reported privately to hello@surfingvest.com. Please avoid public disclosure while an issue is being assessed and addressed.

No online service can guarantee absolute security. This page describes reasonable technical and organisational measures currently applied. It does not claim compliance with any specific security certification framework or independent audit programme unless explicitly stated in writing outside this website.