• Give every employee their own account; do not share administrator passwords.
• Use the smallest Party Desk role and brand scope needed for the job.
• Enable multi-factor authentication through a reputable WordPress security solution when appropriate.
• Keep WordPress, Party Desk Pro, themes, and trusted plugins updated.
• Use HTTPS and secure, unguessable customer portal links.
• Collect only the customer information your business actually needs.
• Redact names, email addresses, phone numbers, locations, signatures, and financial details in screenshots.
• Review access promptly when an employee changes roles or leaves.

Follow the privacy, retention, consent, breach-response, and deletion rules that apply to your business and customers.