Payment & security
How a payment on this site actually works, what we can see, and what we never hold.
How your card is handled
Card details are entered in a secure form served by our payment processor, not by this website. The fields are hosted by the processor, the card number is exchanged for a one-time token, and that token is what we use to take the payment. We never see, transmit or store a full card number, and there is nothing to steal from us if this site were ever breached.
PCI DSS
Because the card fields are the processor’s, this store falls in the lightest PCI DSS scope (SAQ A). Our processor is a PCI DSS Level 1 service provider — the highest level defined by the card networks.
Checks that run on every payment
| AVS | Your billing address is checked against the card issuer’s record. |
|---|---|
| CVV | The three or four digit security code is verified at authorisation. |
| 3-D Secure | Where your bank requests it, you will be asked to confirm the payment in your banking app. We do not disable it. |
| Encryption | Every page on this site is served over TLS. Card data is encrypted in transit end to end. |
One charge, no surprises
Every purchase here is a single, one-time charge for the goods in that order. There is no subscription, no membership, no recurring billing and no stored card anywhere on this site. If you ever see a second charge, it is an error — tell us and we will refund it the same day.
Your statement
Charges appear as SQ *PINKFECT GOODS. The “SQ *” prefix is our processor’s, and the name is ours.
Please contact us before disputing
If a charge looks wrong, email support@pinkfectgoods.store with the date and the last four digits of the card. We can find the order and refund it in a day or two. A bank dispute takes weeks, costs both of us, and gets you your money slower. We have never refused a refund for a charge we could not explain.
Your data
We keep the order details we need to fulfil and account for the sale: name, shipping address, email, order contents and the processor’s reference. We do not sell data, and we do not share it with anyone beyond the carrier and the processor. See the privacy policy for the detail.