1. Proportionate security approach
TWH Holdings Limited uses proportionate technical and organisational measures based on the type of information, likely harm, service design, suppliers and practical risk. This policy is a public summary and does not publish sensitive security configuration.
2. Measures that may be used
- role-based access and least-privilege principles;
- strong authentication and secure device practices;
- encryption in transit and, where appropriate, at rest;
- secure hosting, updates, backups and recovery arrangements;
- supplier due diligence and data-processing terms;
- logging, monitoring, anti-malware and fault detection appropriate to the service;
- staff/contractor confidentiality and security guidance;
- controlled handling of property access information; and
- incident response, evidence preservation and breach assessment.
3. Public and private information
The public website does not publish key-safe codes, alarm procedures, Wi-Fi passwords or personal local support details. Confirmed guests receive current information through approved communications connected with their reservation.
4. Payments
Where a regulated payment provider handles card details, TWH Holdings Limited should receive only the information needed to reconcile the transaction, such as status and reference. Do not send full card details by ordinary email.
5. Incident response
Suspected incidents are triaged, contained, investigated and documented. Risk to people is assessed, suppliers and insurers are engaged where needed, and regulators or affected individuals are notified when legally required.
6. Reporting a concern
Send suspected security issues privately to twhillier@mac.com. Include the affected page or feature, what you observed, when it happened and safe reproduction details. Do not access more information than necessary or publish access/security details.
7. No absolute guarantee
No system can be guaranteed completely secure. Controls are reviewed and improved in light of changes, incidents, vulnerabilities and supplier updates.
Contact and version control
Meadway, Mill Road, Writhlington, Radstock, England, BA3 5TY
This policy is reviewed when the service, law, technology or suppliers materially change. The date above identifies the current public edition.
