|
|
Java-E UK - Security (Credit Cards)
Security and data integrity are paramount for internet retailing, and at Java-E UK we take them extremely seriously.
We never know your credit/debit card details
We never have access to any of your card details; we simply get confirmation from a secure card-clearing company (WorldPay) that your payment has been successful (or failed).
Card payments are very secure
WorldPay is the credit/debit card clearing facility suggested by National Westminster Bank UK Plc (NatWest), as well as a vast number of other highly reputable organisations, and they are part of the Royal Bank of Scotland Group.
We are undergoing a review of various new security measures
The credit card companies, and WorldPay, are all trying to implement various new levels of security to ensure yet more safety against fraud. Some of these changes are invisible to customers, and are simply additional internal checks, but other changes are highly visible to customers and require their explicit entering of extra data as well as additional registrations with the card companies etc.
At Java-E UK, we want to help make card payments as secure as possible and help guard our customers against fraud. However, some of the new measures which are undergoing review would require so much extra effort by the customer that in the real world, most customers would simply give up half way through the transaction, go offline and just buy from a physical shop instead or place an order by phone.
There's a very careful balancing act between guarding against fraud, and not making the purchasing process impossibly complex and awkward for the customer.
Once we've finished our review of all the new measures which are being considered, we want to give our customers what we think is the best combination of security and practicality by default, but to also allow our customers the option of choosing a higher level of security if they wish it. For example, by default we'd rather not force our customers into having to register all their credit cards online as a separate process (creating extra PINs/Passwords etc for every card), but if they do want to do this then we'd like to allow that option on our site.
We welcome any feedback from any members of the public about this question of balancing security against practicality, regardless of whether or not you're a customer (or a potential customer). Our view is that the online card-clearing process should be as secure as possible, but that the card-detail entering process should just involve a single simple page with the relevant fields, and that it should definitely not involve stepping between different pages or sites in between entering different details of the card for the same transaction. We also believe that pop-up windows should absolutely NEVER be used for any such security measures as they are inherantly dangerous (easily hijacked/mimicked by hackers), unstable, and highly incompatible with various browsers/systems etc.
In summary, we'd like to keep things exactly as they are for our site by default, but to also give our customers an optional [Use Card PIN/Password] option if they want to use that extra level of security.
|