This page states plainly what customer data we hold, what we never see, how it is protected, and exactly what we will do if a security incident ever affects your information.

What we hold — and what we never see

Our store runs on Shopify, and payments are processed through PCI-DSS compliant payment gateways. Full card numbers are handled by the payment gateway during checkout — they are not stored on, or accessible to, our systems or our staff. What we do hold is what it takes to build, ship, and support equipment: names, contact details, billing and delivery addresses, order history, and correspondence. The full description of collection and use is in our Privacy Policy, and California opt-out rights are at Do Not Sell or Share My Personal Information.

How it is protected

Data in transit is encrypted with TLS. Shopify, our platform provider, is a PCI DSS Level 1 certified provider and maintains the physical and network security of the platform. Internally, account access is limited to staff who need it to process orders and support customers. We do not sell personal information.

If a breach occurs — our commitments

If we determine that a security incident has exposed customer personal information, we will: contain the incident and investigate promptly, engaging outside forensic support where warranted; determine the scope and the individuals affected; notify affected customers without unreasonable delay and within the timelines required by applicable state breach-notification laws, including Tennessee's (Tenn. Code Ann. § 47-18-2107); notify regulators, card networks, and consumer reporting agencies where the law requires it; and cooperate with law enforcement. Notice will be in plain English: what happened, what information was involved, what we are doing about it, and what you can do.

How we would contact you

Breach notification would come to the email address on your order and, for incidents affecting a broad set of customers, by a prominent notice on this website. A legitimate notice from us will never ask you to "verify" a password, provide a full card number, or click through to enter payment details. If you receive a message claiming to be from us that does any of those things, do not respond — forward it to Service@mymortuarycooler.com.

Reporting a security concern

If you believe you have found a vulnerability in our website, or you have received a suspicious message using our name, email Service@mymortuarycooler.com with "Security" in the subject line. Good-faith reports are welcome, will be acknowledged, and will be acted on.

This policy supplements our Privacy Policy and Terms and Conditions. American Mortuary Coolers & Equipment · 140 Kwick Way Lane, Unit 7, Johnson City, TN 37615 · 1-888-792-9315