How we protect your account
Wonderful Blossoms Financial Consultants Ltd takes account access seriously. This page describes controls that are in place today — not a marketing list of features we hope to add.
Encrypted in transit
Account and dashboard traffic is served over HTTPS. Browsers are instructed not to embed this site in a frame, which reduces clickjacking risk.
Signed-in sessions
Clients and staff sign in with email and a password. Sessions are role-checked so admin tools are not available on the client portal.
Stored credentials
Passwords are stored as one-way hashes. We never ask for your password by email or SMS.
What we do not claim yet
Two-factor authentication is not available on sign-in. Treat that as a planned control, not a current one.
If something looks wrong
If you did not request a sign-in, or you received an unexpected message asking for your password, do not reply. Contact the office from a number or address you already trust.