Security

Every website hosted on the Midas Creation platform comes with a fully managed SSL certificate included as standard. SSL — Secure Sockets Layer — encrypts the connection between your website and your visitors, ensuring that any data exchanged is protected from interception. An active SSL certificate also signals trust to your visitors through the padlock icon displayed in their browser, and is a recognised ranking factor for search engines. You will never need to purchase, install, or renew an SSL certificate manually — we handle everything.

Midas Creation takes data protection seriously and operates in full compliance with applicable data protection legislation including the UK General Data Protection Regulation. We collect only the data that is necessary to provide our services and we never sell, share, or distribute your personal or business data to third parties for commercial purposes. Your data belongs to you and we treat it as such.

All personal data collected through our platform is stored securely using industry standard encryption both in transit and at rest. Access to client data within our organisation is strictly controlled and limited to authorised personnel only.

Our hosting infrastructure is built on enterprise grade technology designed for reliability, resilience, and security. Our systems are monitored continuously for suspicious activity, unauthorised access attempts, and performance anomalies. Automated threat detection systems operate around the clock to identify and respond to potential security incidents before they can affect your website or your visitors.

We apply security patches and infrastructure updates on a regular basis to ensure our platform remains protected against known vulnerabilities. Where updates require scheduled maintenance we aim to communicate these in advance and complete them during off-peak hours to minimise any disruption to your website.

All payments processed through Midas Creation are handled by Stripe, one of the world's most trusted and secure payment processors. Stripe holds PCI DSS Level 1 certification — the highest level of payment security certification available in the industry. This means your payment details are never stored on our servers and every transaction is processed through an encrypted, compliant, and independently audited payment environment.

We do not store card numbers, CVV codes, or any sensitive payment information on our platform. Every transaction is handled entirely within Stripe's secure infrastructure.

We are committed to maintaining maximum uptime across all hosted websites. Our infrastructure is designed with redundancy and failover capabilities to ensure that even in the event of a hardware or network issue, your website remains accessible. We target a platform uptime of 99.9% and monitor availability continuously across all hosted sites.

In the unlikely event of an outage or degraded performance, our team is alerted immediately and works to restore full service as quickly as possible. Our public status page provides real time information on platform status and any ongoing incidents so you always know exactly what is happening.

If you believe you have identified a security vulnerability in our platform we encourage you to report it to us responsibly. Please contact our team directly at the address listed on our contact page and provide as much detail as possible about the potential vulnerability. We take all security reports seriously and commit to investigating and responding to every submission promptly.

While we do everything within our power to keep your website secure at the infrastructure level, we also encourage all clients to follow best practices on their end. This includes using strong, unique passwords for any accounts connected to your website, keeping any third party integrations and plugins up to date, and being vigilant about phishing attempts or social engineering tactics that could compromise your account credentials.

Security is a shared responsibility and we are committed to working with you to ensure your website remains safe, secure, and protected at every level.