Complete Home Care

Revdex.com: I have reviewed the response made by the business in reference to complaint ID [redacted] , and have determined that this does not resolve my complaint For your reference, details of the offer I reviewed appear belowIf you’re storing the data via hardcopy, you’ll need to review and follow PCI DSS Requirement In order for the electronic storage of cardholder data to be PCI compliant, appropriate encryption must be applied to the PAN (primary account number)In this situation, the numbers in the electronic file should be encrypted (either at the column level, file level or disk level).Additionally, all other PCI controls would apply to the environment in which the cardholder data is transmitted and storedThis includes, but is not limited to, appropriate access control, network security parameters, physical security parameters and periodic security testing, such as penetration testing and vulnerability scanningAlternatively, tokenization can be implemented for recurring and/or delayed transactions to help reduce or eliminate the need for electronically stored cardholder data while still maintaining current business processesThe simple question was are you PCI compliant abs are we protectedWith receiving the answer that company did not have to provide information to us the consumer, we considered this to be suspicious and therefor ask all our Cristy card out credit card information be remove and payment sent via money orderWe continue to monitor activity to our account for misuse and complaint was basically to make other aware of company's stance on PCI complaince and hopefully the CFPB catches up with them if there is a gap in processMeanwhile all transactions will be cash or money order from us going forward.The best thing they can do for the business is to not store any cardholder data or personally identifiable information (PII) at all Regards, [redacted]