Payment Security

When you enter your card number, expiry and security code at checkout, those fields are not part of this website. They are served inside an isolated frame operated by a PCI DSS Level 1 certified payment provider, on that provider's own systems.

This means your full card number never reaches our servers, is never written to our logs, and is never stored in our database. We could not retrieve it if we wanted to. What we receive back is a token — a meaningless reference that can be used to take the payment you authorised and nothing else.

After a purchase we hold only the card brand, the last four digits and the expiry, which is what appears on your order record so you can tell which card you used.

Every page on this site is served over TLS with HTTP Strict Transport Security enabled, so your browser will refuse to connect over an unencrypted link even if something tries to force it.

Payment data is encrypted in transit with 256-bit TLS between your browser and the payment provider.

We support 3-D Secure — the additional verification step your bank may present, branded Visa Secure, Mastercard Identity Check or American Express SafeKey.

If your bank asks for it, you will see a verification screen from your bank during checkout. We do not see, receive or store anything you enter on that screen.

Charges from this store appear on your statement as VERATIS HOME.

If you see a charge you do not recognise, please email support@veratishome.com or call us before contacting your bank. We can identify the order and resolve it the same day, which is almost always faster than a dispute.

We check the billing address and security code you provide against the records your card issuer holds. This is why we ask for your billing address separately from your shipping address — the billing address must be the one your bank has on file, or the check fails and your bank may decline an otherwise valid payment.

We do not store your security code at any point, including during this check.