Payment security on our website
We use SagePay server as our payment solution.
The transaction takes place in an iframe on our site but is handled directly by Sagepay, we DO NOT store any of your payment details in our databases.
Your transaction is handled by a secure HTTPS POST from our web server to the Sage Pay’s servers, followed by a callback. It is arguably the most secure of Sage Pay’s integration, combining the security of HTTPS POST with other anti-fraud features, ensuring that no tampering has taken place during the transaction…
SagePay (formerly Protx) are the UK's leading independant payment service provider .
Sage Pay’s systems are scanned quarterly by Trustwave which are an independent Qualified Security Assessor (QSA) and an Approved Scanning Vendor (ASV) for the payment card brands.
Sage pay is also audited annually under the Payment Card Industry Data Security Standards (PCI DSS) and is a fully approved Level 1 payment services provider, which is the highest level of compliance. SagePay are are also active members of the PCI Security Standards Council (SSC) that defines card industry global regulation.
