Who we are

Our website address is: https://inkandcompass.com.

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Visitor comments may be checked through an automated spam detection service.

Information Security Policy

Ink & Compass Creative Studio LTD

Date: 13.03.2025

Introduction

This Policy Document encompasses all aspects of security surrounding confidential company information and must be distributed to all company employees. All company employees must read this document in its entirety and sign the form confirming they have read and understand this policy fully. This document will be reviewed and updated by Management on an annual basis or when relevant to include newly developed security standards into the policy and distribute it to all employees and contractors as applicable.

Information Security Policy

Ink & Compass Creative Studio handles sensitive cardholder information securely. Sensitive Information must have adequate safeguards in place to protect them, to ensure cardholder privacy, ensure compliance with various regulations, and to guard the future of the organization.

Ink & Compass Creative Studio is committed to respecting the privacy of all its customers and to protecting any data about customers from outside parties. To this end, management is committed to maintaining a secure environment in which to process cardholder information.

Employees handling sensitive cardholder data should ensure:

• Handle company and account data including cardholder information securely.
• Ensure personal use of company systems does not interfere with job performance.
• Ensure electronic communications are not misused.
• Protect sensitive cardholder information at all times.
• Avoid using messaging technologies like email or WhatsApp to share cardholder data.
• Keep passwords and accounts secure.
• Do not install unauthorized software or hardware without approval.
• Always leave desks clear of sensitive cardholder data and lock computer screens when unattended.

Access to the Sensitive Cardholder Data

All access to sensitive cardholder data should be controlled and authorized. Any job functions requiring access to cardholder data should be clearly defined. Display of cardholder data should be restricted to the first six and last four digits. Privileged access should be granted based on job responsibilities only.

Third-Party Service Providers

The following third-party service providers may access or manage cardholder data as part of our business operations:

Encryption Policy

Cardholder data must be encrypted using industry standards such as AES 256-bit encryption. Encryption keys must be managed securely with annual rotation and restricted access.

Incident Response Plan

In the event of a security breach:

• The incident must be reported immediately to the designated security officer.
• The PCI Response Team will investigate and implement measures to mitigate further exposure.
• Relevant authorities, including credit card processors, will be informed as required.

Roles and Responsibilities

Appendix A: Agreement to Comply Form
Appendix B: List of Third-Party Service Providers

Employee Name (printed)

Department

Employee Signature