CSI Compliance
Information Security Policy summary for Palapas Ventana - how we protect confidential information and cardholder data across our La Ventana resort, activities, and online bookings.
Company: Palapas Ventana · Date: October 20, 2025 · Contact: contact@palapasventana.com
This policy governs the protection of confidential information, including cardholder data, across Palapas Ventana. All personnel must read, understand, and acknowledge it. Management reviews the document annually or upon material change.
Introduction
This document covers security around confidential company information. Employees must read it in full and confirm understanding. It applies to bookings, payments, reservations systems, shuttles, activities, and any device or vendor that touches guest or payment data.
What we protect
- Guest booking and contact details
- Payment and cardholder data used for deposits and balances
- Operational systems used for reservations, shuttles, and activities
Information Security Policy
- Handle data according to its sensitivity
- Limit personal use of company systems; no offensive or illegal use
- Keep passwords secure and lock screens when unattended
- Never send cardholder information via email, WhatsApp, Signal, SMS, or other messaging apps
- Report security incidents immediately to the information security contact
How we handle cardholder data
- Cardholder data is handled only by authorized staff for legitimate booking purposes
- Access to sensitive payment information is limited to roles that need it
- Stored data is protected, classified, and disposed of when no longer required
- Data in transit and at rest follows our encryption and network controls
Security practices
- Strong passwords, locked workstations, and controlled remote access
- Network, antivirus, patching, and vulnerability management controls
- Physical security for offices, terminals, and devices that touch payment data
- Third-party providers reviewed for their role in protecting cardholder data
- Incident reporting and response when an issue is suspected
Your rights & questions
For privacy requests see our Privacy Policy. For security or CSI compliance questions, contact contact@palapasventana.com.
Public summary of our Information Security Policy · Last refreshed October 2025
