Backup Policy – Ace Intl Media Ltd

💾 Backup Policy – Ace Intl Media Ltd

Effective Date: 27/08/2025
Last Updated: 27/08/2025

Ace Intl Media Ltd (“we”, “us”, “our”) defines this Backup Policy to ensure business continuity, disaster recovery, and the protection of client and company data across our VM servers, Plesk environment, WHMCS billing platform, and hosted websites.

🎯 1. Purpose

To protect against data loss and enable timely restoration of services by implementing layered backups and regular recovery testing.

📌 2. Scope

  • 🖥️ VM servers (hypervisor-level configuration and system images).
  • ⚙️ Plesk control panel (configurations, subscriptions, email, databases).
  • 💳 WHMCS billing & automation (application files and database).
  • 🌐 Client websites (files, media, application code, databases).

👥 3. Roles & Responsibilities

  • Infrastructure Team: Configure, monitor, and maintain backup jobs.
  • Security/Compliance: Ensure 🔒 encryption, access control, and retention adherence.
  • Support Team: Handle restore requests and client communications.

🕒 4. Backup Schedule

  • 🖥️ VM Server: Weekly full + daily incremental; retention 30–90 days; offsite copy.
  • ⚙️ Plesk: Weekly full + daily incremental; retention 30 days; remote storage.
  • 💳 WHMCS Database: Hourly dump + daily full; retention 90 days; encrypted offsite.
  • 📂 WHMCS Files: Daily; retention 30 days; encrypted offsite.
  • 🌐 Websites: Daily incremental + monthly full; retention 30–60 days.

🔒 5. Storage & Encryption

  • Backups are encrypted in transit and at rest (AES-256 or stronger).
  • Copies stored in at least two geographically separate locations (offsite/cloud).
  • Role-based access controls with logging and MFA where available.

🧪 6. Verification & Testing

  • Automated ✅ integrity checks on all backup jobs.
  • Weekly 🔄 sample restores of client websites.
  • Monthly 📊 WHMCS full restore test to staging.
  • Quarterly 🛠️ disaster recovery drill (Plesk/VM to staging).

🚨 7. Disaster Recovery (DR)

Restore priority: VM Server → Plesk → WHMCS → Client Websites

  • ⏱️ RTO (Recovery Time Objective): 4 hours
  • 📅 RPO (Recovery Point Objective): 1 hour (WHMCS), 24 hours (websites)

🗄️ 8. Retention

Retention follows the schedule in Section 4. Backups beyond retention are securely purged to maintain compliance and storage efficiency.

⚖️ 9. Compliance & Security

  • Backups comply with applicable regulations (e.g., UK GDPR, ISO/IEC 27001 principles).
  • Personal data in backups is encrypted and access-logged.
  • Backups are not stored on the same physical server as production.

🔄 10. Review

This policy is reviewed at least every 6 months or after major infrastructure or regulatory changes.

📞 Contact

Ace Intl Media Ltd
Company Number: 16568627
3rd Floor, 45 Albemarle Street,
Mayfair, London, W1S 4JL

📧 Email: support@aceintlmedia.com
☎ Phone: +44 1342 621126