Information Security Policy

Scope. This policy describes how J&J Initiative LLC (dba Lambear Industries) protects the information entrusted to us by customers and partners across lambear.industries and our connected sales channels.

Secure platform & transmission. Our storefront runs on BigCommerce, a PCI DSS Level 1–certified commerce platform. All traffic to and from our site is encrypted in transit via TLS/HTTPS, and we rely on our platform and payment providers' certified infrastructure for hosting, network, and application security.

Payment data. We do not store, process, or transmit full payment-card data on our own systems. Card payments are handled by PCI-DSS-compliant processors integrated with our platform.

Access control. Access to our administrative systems, customer data, and integration credentials is restricted to authorized J&J Initiative LLC personnel using unique authentication and least-privilege access. API keys and secrets are stored securely and never exposed publicly.

Data minimization & retention. We collect only the information needed to process orders, provide support, and meet legal obligations, and retain it only as long as necessary, after which it is deleted or anonymized. See our Privacy Policy for details.

Third-party integrations. Connections to third-party services and marketplaces (such as TikTok Shop) are made only through official, secured APIs using access-controlled credentials over encrypted channels, requesting only the minimum data and permissions required.

Incident response. For any suspected security incident affecting personal information, we investigate promptly, take corrective action, and notify affected individuals and authorities as required by law.

Contact. admin@lambear.industries · Last updated: July 2026