The whole site is served over an encrypted connection. Anything you send us — your details at checkout, your password if you have an account — travels encrypted.
Card payments are handled by our bank. You enter your card details on the bank’s own secure page, not on ours.
We never receive, see or store your card number, expiry date or security code. We keep only the last four digits, which is what appears on your order record so it can be identified later.
Card payments use 3-D Secure, the additional confirmation step your own bank asks for — usually a code sent to you, or approval in your banking app.
We accept Visa, Mastercard and ArCa cards.
If you see a payment you do not recognise, contact your bank first, and then contact us so we can help identify the order.