🔐 Payment & Data-Security Policy

1. Overview

The Florida Bail Agents Association (FLBAA) is committed to safeguarding the personal and financial information of our members, licensees, and continuing-education participants. All payment processing conducted through this website complies with the Payment Card Industry Data Security Standard (PCI DSS) and the Florida Information Protection Act (FIPA – F.S. 501.171).

2. Secure Payment Processing

All online payments for membership dues, event registrations, and continuing-education courses are processed securely through Clover, a PCI DSS–certified payment gateway operated by Fiserv.

  • Payment information is encrypted and transmitted directly to Clover’s secure environment for authorization and storage.
  • FLBAA servers never store full card numbers, CVV codes, or magnetic-stripe data.
  • Clover returns a tokenized reference used for receipts, refunds, or membership renewals.

This process ensures that all sensitive payment information remains within Clover’s certified infrastructure at all times.

3. Website Security Practices

  • SSL encryption on every page of the site.
  • Regular updates to WordPress core, WooCommerce, and security plugins.
  • Multi-factor authentication (2FA) for administrative access.
  • Daily backups and malware scans through managed hosting.
  • Minimal-access controls limiting who can view or modify member data.

We continuously monitor the website for vulnerabilities and apply industry-standard security patches promptly.

4. Data Retention and Privacy

Only the information necessary to process transactions and maintain membership records is collected, such as:

  • Name, business name, email address, and contact information.
  • Payment confirmation identifiers and non-sensitive card metadata (last four digits and expiration date).

We never store or transmit full credit-card numbers or CVV codes. All other member data is retained only as long as required for administrative and regulatory purposes.

5. Breach Notification and Response

In the unlikely event of a data incident involving personal information:

  • The FLBAA will investigate immediately and notify affected individuals within 30 days, as required by the Florida Information Protection Act.
  • For incidents affecting 500 or more Florida residents, notice will also be provided to the Florida Attorney General and relevant credit-reporting agencies.
  • We will coordinate with Clover and our acquiring bank to ensure secure containment and remediation.

6. Your Responsibilities

  • Keep account credentials confidential.
  • Avoid sending payment details by email or text message.
  • Report any unauthorized or suspicious transactions to info@flbaa.com.

7. Contact Information

Florida Bail Agents Association (FLBAA)
Email: info@flbaa.com
Website: https://flbaa.com