Our Payment processing is done using the Sage Pay
VSP System, so you can shop with us in complete confidence, knowing that your
payment details are processed using the best possible methods available.
Sage Pay provides very high levels of internet and physical security to ensure
sensitive information is never compromised.
Sage Pay security measures credit/debit card details are secured within
128-bit encrypted sessions. Sensitive information is stored on a heavily
encrypted database that is protected by multiple government approved firewalls.
Additional security measures include a security key that is used to produce an
MD5 hash value. Hash values are often used as digital signatures as they cannot
be reversed to obtain the original information. They allow the receiver to
validate that the information received is identical to that sent.
Sage Pay VSP is designed so the vendor doesn't have to hold sensitive information
on their site, should anyone gain unauthorised access to their database the
information they obtain will not allow them to recover credit card details or
other sensitive information.
The possibility of obtaining sensitive information from the Sage Pay VSP database
is minimised due to high levels of encryption; firewall security and the
measures taken to ensure the information is indecipherable.
Physical security and resilience
Several forms of physical security and multiple levels of system backup protect
the Sage Pay VSP and database. This makes transaction processing highly reliable
and resilient to events such as security breach or power failure.
Only authorised personnel can gain access to the VSP Server and fingerprint
identification is required.
Multiple servers are dedicated to particular roles. The VSP Servers are fed by
multiple power supplies and backup generators. Secondary network connections
will activate should the primary network fail. VSP Servers have multiple
connections to banking authorisation and settlement systems.