Security Policy

Effective Date: July 11, 2025
Last Updated: July 11, 2025

At Star Bright Electric LLC
(“Star Bright Electric,” “we,” “our,” “us”), we are committed to
safeguarding the security of our website visitors, clients, and
employees. This Security Policy outlines the measures we take to
protect data, systems, and operations against unauthorized
access, breaches, and other threats.

By accessing www.StarBrightElectricllc.com, you acknowledge
and agree to the practices described herein.

---

1. Scope of the Policy

This Security Policy applies
to:

• All data collected through www.StarBrightElectricllc.com and related
  systems

• Our physical and digital
  operations

• Third-party services and
  integrations used in delivering our services

---

2. Digital Security
Measures

2.1 Data Encryption

We use SSL/TLS encryption
across our website to protect data in transit. All sensitive
information (such as personal data and payment details) is
encrypted during transmission.

2.2 Secure Hosting

Our website is hosted on
secure servers with industry-standard protections, including:

• Firewalls

• Intrusion detection and
  prevention systems (IDPS)

• Regular vulnerability
  assessments

2.3 Access Controls

Only authorized personnel
are granted access to sensitive systems and data. Access is
controlled through:

• Role-based permissions

• Strong password policies

• Multi-factor authentication
  (MFA) where applicable

2.4 Regular Updates and
Patch Management

We maintain our systems and
applications with the latest security updates and patches to
prevent exploitation of vulnerabilities.

---

3. Data Protection and
Privacy

Star Bright Electric
complies with applicable data protection laws, including GDPR and
CCPA. For more details on how we collect and use data, please
see our Privacy Policy.

---

4. Physical Security

4.1 Office Security

Our office location in
Yardley, PA is protected by:

• Controlled entry systems

• Video surveillance in key
  areas

• Alarm systems monitored by a
  third-party security service

4.2 Equipment
Protection

Company devices are secured
with encryption, password protection, and antivirus software.
Physical devices are stored securely when not in use.

---

5. Third-Party Services and
Integrations

We work with trusted
third-party vendors for services such as website hosting, payment
processing, and analytics. Each vendor is vetted for security
compliance, and contractual agreements require them to uphold
high standards of data protection.

---

6. Incident Response
Plan

In the event of a security
breach or suspected incident, we follow a structured response
plan:

1. Identification – Detect and verify the
   incident.

2. Containment – Isolate affected systems
   to prevent spread.

3. Eradication – Remove threats and address
   vulnerabilities.

4. Recovery – Restore services to normal
   operation.

5. Notification – Inform affected parties
   and regulatory authorities as required by law.

---

7. User
Responsibilities

You play a role in
maintaining security by:

• Using strong, unique
  passwords for your accounts

• Not sharing login
  credentials

• Keeping your devices and
  software up-to-date

---

8. Compliance with
Laws

Star Bright Electric
complies with:

• General Data Protection Regulation
  (GDPR) for EU residents

• California Consumer Privacy Act (CCPA)
  for California residents

• Applicable U.S. federal and
  state laws regarding data security

---

9. Changes to This Security
Policy

We may update this Security
Policy as needed. Updates will be posted on this page with the
revised effective date.

---

10. Contact Us

For questions about this
Security Policy or to report a security issue, contact us at:

Star Bright Electric LLC
Yardley, PA
📞 (201) 787-2237
✉️ [email protected]