Customer Account Security & Access Responsibility Policy

Business

Product

Legal

1. Purpose of This Policy

Artisan Furniture provides secure digital platforms, dashboards, tools, and SaaS systems to enable business customers to manage orders, data syncing, content, integrations and operational workflows. To maintain the security and integrity of these systems, it is essential to define the responsibilities shared between Artisan Furniture and our business customers. This policy outlines what we secure, and what customers must secure on their side.

2. Artisan Furniture’s Security Measures

Artisan Furniture implements a comprehensive security framework including encrypted login sessions, secure credential storage, strong password enforcement, two-factor authentication (2FA), authorised device monitoring, rate limiting, session timeout rules, secure API token generation, internal access controls, and regional hosting security compliance.

3. Customer’s Responsibility for Account Security

3.1 Login Credentials

Customers are responsible for maintaining strong passwords, updating them regularly, preventing reuse, and ensuring they are not shared.

3.2 Two-Factor Authentication (2FA)

Customers must enable 2FA where available. Failure to do so constitutes customer-side negligence.

3.3 Device Security

Customers must ensure all devices accessing Artisan systems are secure with updated operating systems, antivirus tools, and secure networks.

3.4 Staff Access & Internal Controls

Customers must manage staff access, deactivate access for former employees, and ensure only authorised personnel have platform access.

3.5 API Keys & Technical Credentials

Customers must secure API keys, store them properly, rotate when needed, and prevent third-party misuse.

4. Unauthorised Access & Misuse

Artisan Furniture is not liable for losses arising from weak passwords, shared credentials, stolen devices, former employee misuse, lack of 2FA, insecure API storage, phishing, malware, or unauthorised orders placed through compromised accounts.

5. Customer Obligations to Maintain Security

Customers must maintain confidentiality, rotate passwords, secure devices, restrict admin access, remove access for departing staff, report suspicious activity, secure integrations, and maintain SSL and strong passwords on their own e-commerce platforms.

6. Liability Disclaimer

Artisan Furniture excludes liability for losses caused by customer-side security failure, fraudulent orders from compromised accounts, misuse of customer credentials, or unauthorised downloads/API actions from customer-side breaches.

7. Account Recovery & Investigation

If a breach is reported, Artisan will secure the account, reset credentials, lock sessions, review logs, and restore access to a verified administrator. Financial losses remain the customer’s responsibility unless caused directly by Artisan’s systems.

8. Recommended Best Practices

Password rotation every 90 days, password managers, mandatory 2FA, individual sub-accounts, limited admin roles, log reviews, and secure devices are strongly recommended.

9. Policy Incorporation

This policy forms a binding and integral part of the following master governance documents:

Terms & Conditions
Returns Policy
Policy & Compliance Hub (https://aboutus.artisanfurniture.net)

By accessing or using any Artisan Furniture digital platform, dashboard, SaaS module, API, or customer account, the customer acknowledges and agrees to comply with this policy in conjunction with the above master documents.

10. Official Communication Channels, Banking Safety & Anti-Phishing Requirements

Artisan Furniture never sends emails from free, public, or generic email services such as Gmail, Yahoo, Hotmail, Outlook.com, iCloud, AOL, ProtonMail, or similar. All authorised communications originate only from the verified corporate domains:

@globalvisiondirect.co.uk

@artisanfurniture.net

@artisanfurniture.us

@artisanfurniture.ca

@artisanfurniture.eu

@artisanfurniture.au

@artisanfurniture.in

Our banking details have never changed since the inception of the business. We never email new bank details, request changes to saved payees, send amended account numbers, or provide payment instructions via phone, WhatsApp, SMS, or social media. Any such communication must be treated as fraudulent.

Artisan Furniture never sends unsolicited payment links, QR codes, SMS payment requests, “urgent payment updates,” or invoice amendments without prior conversation. All payments must always be made to the long-standing official bank account listed on the invoice issued through our secure platform.

Customers must verify sender domains, confirm payment instructions via an official channel, cross-check bank details with historic invoices, train staff against payment diversion scams, and avoid processing any invoice not issued via the secure portal.

Artisan Furniture is not liable for payments made to fraudulent bank accounts, losses arising from phishing or impersonation emails, or financial harm caused by customers acting on unauthorised communications. Only payments made to the officially published bank account of Global Vision Direct Ltd are valid and recognised.

Customers must immediately report suspicious emails, fake payment requests, invoice amendments, or domain look-alikes.

Must be construed together with the Master Terms & Conditions

Published January 2026 | Effective from January 2026 until Superseded or Amended