Policy - Credit Card Handling

Scope: 
This policy applies to all employeesemployees, handlingcontractors, cashand third-party vendors who handle, process, or cashhave equivalentsaccess withinto ourcredit cagingcard operations.information in any form, including physical and electronic formats. It covers all cash-relatedaspects processesof includingcredit acceptance,card storage,data transfers,management counting,within reconciliation,our andorganization. reporting.
 
Policy:

Electronic Storage:
Credit card information must be stored in encrypted, secure databases with restricted access. Access to electronic credit card data should be limited to authorized personnel only. 
 
Definitions:

Constant Supervision:
Never leave cash unattended, including in cash registers, on desktops, or in cash drawers. When leaving a workstation, even briefly, secure all cash in a locked location.   

Restricted Access: 
Limit access to cash handling areas to authorized personnel only.  
 
Secured Entrances:
Keep doors to cash handling areas always locked.  
 
Discreet Counting:
Count and handle large sums of cash out of public view. 

Minimal Working Funds:
Maintain minimal working cash funds. Store excess funds in a locked device or deposit them in the designated financial office. 

Designated Use:
Use received cash solely for its intended purpose. Do not use it for making change, petty cash, expenditures, or refunds. 

SecurePhysical Storage:
DuringAny non-operationalphysical hours,copies storeof allcredit cashcard information must be stored in a secure device such as alocked safe orwhen lockednot in use. location.Access to the safe should be restricted to authorized personnel and logged.

SeparationTemporary Records: 
Credit card information written on sticky notes, paper, or other temporary mediums must be shredded immediately after use. Never leave physical copies of Funds:credit card data unattended.

Data Transmission: 
Use secure, encrypted methods when transmitting credit card information electronically. Don’t send full credit card numbers via email or unsecured messaging platforms.

Employee Training: 
All employees handling credit card information must receive regular training on this policy and best practices for data security.

Incident Reporting: 
Any suspected breach or unauthorized access to credit card information must be reported immediately to the management team.

Compliance: 
Adhere to all applicable laws and industry standards, including PCI DSS requirements.

Auditing: 
Conduct regular audits to ensure compliance with this policy and identify areas for improvement.

Disposal:
Securely dispose of credit card information when no longer needed, using cross-cut shredders for physical documents and secure deletion methods for electronic data. 

Violations:
NeverViolations mixof companythis cashpolicy withmay personal funds, deposit company fundsresult in personaldisciplinary accounts,action, up to and including termination of employment or remove company funds from the premises for safekeeping.contract.