| PAYMENTS, POSTAGE & RETURNS
Payment Security Policy - Sage Pay
As a payment service provider (PSP), thousands of businesses outsource their transaction security to us. It is our top priority to ensure that your customers' transaction data is kept secure at all times.
All transaction information passed between merchant sites and Sage Pay's systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to your servers from Sage Pay are signed using MD5 hashing to prevent tampering. You can be completely assured that nothing you pass to Sage Pay's servers can be examined, used or modified by any third parties attempting to gain access to sensitive information.
Encryption and Data Storage
Once on our systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign's Global Root certificate, making them all but impossible to extract. The data we hold is extremely secure and we are regularly audited by the banks and banking authorities to ensure it remains so.
Sage Pay's systems are scanned quarterly by Trustwave which are an independent Qualified Security Assessor (QSA) and an Approved Scanning Vendor (ASV) for the payment card brands.
Sage pay is also audited annually under the Payment Card Industry Data Security Standards (PCI DSS) and is a fully approved Level 1 payment services provider, which is the highest level of compliance. We are also active members of the PCI Security Standards Council (SSC) that defines card industry global regulation.
View the Sage Pay PCI DSS certificate
Links To Banks
Sage Pay has multiple private links into the banking network that are completely separate from the Internet and which do not cross any publicly accessible networks. Any cardholder information sent to the banks and any authorisation message coming back is secure and cannot be tampered with.
Sage Pay is controlled by Iris Scanners, which are the latest and most precise biometric security devices available for identification. As used by; chemical plants, airports, police stations, prisons and other facilities where security is paramount. No one can enter or leave the building without a valid security pass.
All employees at Sage Pay are Criminal Records Bureau (CRB) checked prior to employment and no unauthorized individual has access to or is able to decrypt transaction information or cardholder data. Our systems only allow access to our most senior staff and only in extenuating circumstances (such as investigations of Card Fraud by the Police). All transaction information and customer card information is secure even from our own employees.
Sage Pay operates on twin data centres to ensure optimal system security and up-time and has a full disaster recovery and business continuation policy.
Need To Return Something? No Problem! If you are not happy with your purchase for any reason, you can return it to us and we will refund you with the amount you paid for that item.
All we ask is that you inform us by email or post and return the product within 14 working days from the day after receipt. We will send you a return code and return address. Write the return code on the outside of the packaging, and then return the product to us at your expense in unused condition and in the original undamaged packaging (or packaging of the same quality) for a full refund less carriage charges. We recommend using an insured delivery service.
Returns must be made within 14 working days of delivery.
You should allow up to 21 days from receipt by us of your returned goods for your refund to be processed. We will normally refund you using the same payment method that you used to purchase the goods. Postage and packaging charges will not be refunded. This does not affect your statutory rights.
You also have the right to cancel your order prior to despatch or performance within 7 days of placing it.
Damaged Or Faulty Goods
If a product is damaged or faulty, please contact us at once and no later than 7 working days of receipt, or of the fault developing, and we will arrange a refund or replacement as you request.
Sometimes the product specifications from the manufacturer may change, in which case, if you request a replacement, we will do our best to offer you a substitute of the same or better quality at the same price. If you are not happy with the replacement, you can return it in accordance with our returns policy as outlined above under returns.
Please allow 30 days from receipt by us of your item for your refund to be processed or replacement item despatched.
We reserve the right to refuse to issue a refund/replacement item and to recover the cost of the returns delivery from you in the event that the item is found to have suffered damage after delivery or has been misused or used other than in accordance with the instructions or if the problem is due to normal wear and tear. This does not affect your statutory rights.
Postage & Delivery Information
Who delivers my order?We use a number of mail and courier services to provide the most secure and fastest delivery possible, depending on weight and size. Typically, we work with the following companies to post your items:
How quickly will my items arrive?
We aim to get all orders processed, dispatched and delivered to your door within 4-7 working days. However, there may be instances where a particular product or size/colour variation will not be in stock and requires a special order. In this case, you will be contacted and informed of any delay on your order.
Unfortunately we do not currently send items to addresses outside the UK mainland. If you have ordered an item and we are not able to deliver to your address, we will refund the total payment and inform you via email that it has been cancelled.