Credit Card and Data Security
Your credit card and personal data security is of paramount importance to us.
Credit Card Security
We use SagePay to securely process your card transaction. We do not hold or store your card details and neither can we as Directors or staff of Clear Prospects Ltd access them as they are all processed remotely by SagePay. All credit card numbers are encrypted in the software we use at the time of ordering and our web site is securely hosted to ensure you are confident of our security measures. Credit Card numbers are immediately encrypted upon submission. Numbers are not held in clear text on any web site.
We will confirm receipt of your order automatically through our system via email so if you do not receive an email from us, please do get in touch as the order may have gone missing.
Payment may also be made by cheque (drawn on a UK bank in Sterling) and posted to us at the address shown on our contact page. If you have any concerns or comments about our security policy please do get in touch with us directly.
Clear Prospects Ltd uses extended validation through GeoTrust the leading provider of card security services. You will see a green bar at the top of our web site, just left of the url at checkout and on all secure (https) pages of our site that proves we have passed this validation process. You will only usually see the extended validation on large blue chip company sites such as Amazon or eBay and it is where a company has gone through extensive checks to prove that they own the domain name that the shop is residing under.
For example, Clear Prospects Ltd, our trading company, has proved we own our shop sites such as thejetrest.com, wheatybags.co.uk, happysnapgifts.co.uk and so on through independent verification.
GeoTrust Site Certification
When you get to the checkout stage on our secure server you will of course notice the url has changed to https which tells you you are now on the secure server. You will also notice further down a logo that says "Verified by GeoTrust" which also shows our registration number. Click this logo and you will see on the pop-up all our latest certification details proving again that we are register, and therefore checked as being a secure site. This is a live certification process and if ever our certificates fail on the regular checks, you will see this, beyond our control in this area.
Barclaycard Fraud Protection
We use Barclaycard to process the banking element of the card transaction which sits behind the scenes of the front-end SagePay processing and have been a card merchant with this global leader since we started in business in 2001. All card merchant companies including Barclaycard insist that quarterly scans are performed to check our security online.
We have to use an independent company to perform these scans that basically test and try to hack our systems every quarter with the latest fraud tools available to them.
We currently use SecurityMetrix to perform this work for us and they are rigerous in their work. Barclaycard would not let us carry on processing cards through SagePay if we ever failed these stringent tests that go on behind the scenes 4 times a year.
Data Protection Act
Clear Prospects Ltd is actively registered under the Data Protection Act and has been since we incorporated the company. We renew our certification every year when fees are paid. Registration number Z5645073. In addition you will also notice that we only request your personal details (name, address etc) at the point where you have entered our secure server (https).
Remember too that although we as a company do store this information, we do not, and in fact cannot store any credit card information as this as mentioned earlier is stored on our card processing providers server (SagePay).
When you register by way of purchasing from one of our online shops, you will be automatically issued with a random password from our system if you do not specify one yourself. Passwords are secure and not available to our staff and our staff will never have need to ask you for your password. If you have forgotten your password at any time, please click the appropriate link on the sites to request the password reminder and the system will send this to you only to the registered email address you set up on our system. If you phone us to ask for your password, our staff will perform this action for you, entering your email address and having the system send you the password as they cannot see your password on our secure server.
The latter is encrypted and the field is not accessible by our team.