Q    Are payments made on my website secure?

A     Yes... all credit card payments are made on secure encrypted connections. When the customer is viewing your web site and inputting delivery address details the URL in the browser address bar will be something like: http://www.yourdomain.co/default.asp. This is not encrypted, and does not need to be. If the customer wishes to pay by cheque then again there is no need for encryption, as the customer is not imputing any financial details. However, if the customer selects to pay by credit card they will forward on to WorldPay or PayPal to make the payment and the URL changes to something along the lines of: https://select.worldpay.com/wcc/transaction or https://www.paypal.com/uk/cgi-bin/webscr?cmd=something. This is a secure encrypted connection. You will see the http:// has changed to https:// and a padlock will be shown on the Internet browser page.Secure connections are slightly slower then normal connections, and require a security certificate for your domain name, which is expensive, so, we will only take the customer to a secure connection when required.

Q   Can I use PayPal Integration on my website?

A    Yes, you may use PayPal.com to accept payments for items sold to your customers. There is no set-up cost, no monthly fee, and it's free to open your PayPal Business account. Just a transaction fee of between 1.4%-3.4% + 20p on each payment. See below for more information (prices correct on 22/07/09):

• PayPal charges a transaction fee of about 3.4% + 0.20 GBP per transaction. Check out there latest fee’s at https://www.paypal-business.co.uk/website-payments-standard.asp

• With PayPal, your funds are available for immediate, free withdrawal (over £50.00 GBP/EUR) to your bank.

Q   What is the Payment Card Industry Data Security Standard (PCI DSS)?

A    Payment Card Industry Data Security Standard (PCI DSS). The Payment Card Industry Data Security Standard (PCI DSS) is a worldwide standard adopted by card schemes for the protection of cardholder identity and transaction information. Any organization that stores, processes or transmits cardholder data including paper or other records needs to comply with the standard and obtain compliance certification or face the prospect of substantial fines should a security breach occur.

We are sometimes asked if our hosting company is compliant with the PCI DSS. The short answer is that they do not need to be. All of the transactions are handled by WorldPay one of the leaders in Internet payment solutions and part of the RBS Group. Any card data taken by the hosting company is entered directly into the Worldpay online systems and the hosting company does not accept, transfer or store any of this data.

The hosting company does however use Secure Sockets Layer (SSL) technology over our entire Web site. This is confirmed by the padlock in the address bar of your browser when you visit. There SSL Certificates enable encryption of all information whilst on the hosting system site, each SSL Certificate also contains unique, authenticated information about us and a Certificate Authority has verified our identity prior to issue. This is the single most important step in meeting PCI DSS and it is possible that the hosting company applies for compliance certification in the near future.

We can at anytime and without notice update, change or remove any content.