Security Policy

You can be assured of a safe and secure transaction with us as we use Sage Pay to collect/process transaction information. 

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

We are fully aware of the potential risks of placing orders with credit cards over the Internet. That's why we have chosen SagePay as our service provider.

When placing your order on-line with - your card details are input into the SagePay server through a secure connection known as SSL. We use standard internet encryption technology to scramble your personal data when transmitted. This process is known as SSL (secure sockets layer). 

Additionally we do not hold any of your credit or debit card details anywhere on our website. They are passed securely to our payments processor for authorisation by your bank. 

With the UK's highest levels of security in place at SagePay - you can be assured that your payment to is secure.

If you choose to place your order over the telephone then we input your details directly. Important: All credit card details are shredded immediately after order processing - we never hold onto your credit card information.

Our regular customers have their delivery details already registered on our system, but we never pass this information to 3rd parties.

Transaction security

All transaction information passed between merchant sites and Sage Pay’s systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to our servers from Sage Pay are signed using MD5 hashing to prevent tampering. You can be completely assured that nothing you pass to Sage Pay’s servers can be examined, used or modified by any third parties attempting to gain access to sensitive information.

Encryption and Data Storage

Once on our systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign's Global Root certificate, making them all but impossible to extract. The data we hold is extremely secure and we are regularly audited by the banks and banking authorities to ensure it remains so.

System security

Sage Pay’s systems are scanned quarterly by Trustwave which are an independent Qualified Security Assessor (QSA) and an Approved Scanning Vendor (ASV) for the payment card brands.

Sage pay is also audited annually under the Payment Card Industry Data Security Standards (PCI DSS) and is a fully approved Level 1 payment services provider, which is the highest level of compliance. We are also active members of the PCI Security Standards Council (SSC) that defines card industry global regulation.

View SagePay's PCI DSS Certificate

Links to banks

Sage Pay has multiple private links into the banking network that are completely separate from the Internet and which do not cross any publicly accessible networks. Any cardholder information sent to the banks and any authorisation message coming back is secure and cannot be tampered with.

Internal security

Sage Pay is controlled by Iris Scanners, which are the latest and most precise biometric security devices available for identification. As used by; chemical plants, airports, police stations, prisons and other facilities where security is paramount. No one can enter or leave the building without a valid security pass.

Staff validation

All employees at Sage Pay are Criminal Records Bureau (CRB) checked prior to employment and no unauthorized individual has access to or is able to decrypt transaction information or cardholder data. Our systems only allow access to our most senior staff and only in extenuating circumstances (such as investigations of Card Fraud by the Police). All transaction information and customer card information is secure even from our own employees.

Disaster recovery

Sage Pay operates on twin data centres to ensure optimal system security and up-time and has a full disaster recovery and business continuation policy.

SagePay Online Shopper Support
If you do have any issues when using Sagepay the following information may be of benefit, please click on the logo below... but don't forget that we are always here to assist you.

Sagepay Online Customer Support