Security Details & Transmission of Payment Card Data
We take the security of your payment information seriously. This page explains how payment details are handled when you shop with Perfec-Tone and the steps we take to protect you.
How We Process Payments
Your card details go directly to our payment providers over encrypted connections. Available methods may include Shop Pay / Shopify Payments, PayPal, Affirm or Afterpay, depending on your region.
PCI DSS Alignment: We rely on PCI DSS–compliant payment processors to collect and handle card data. Perfec-Tone does not process raw card numbers on our servers.
How We Protect Your Card Data
- Transport Encryption: All checkout pages use HTTPS with modern TLS to encrypt data in transit between your browser and the payment provider.
- Tokenization: Payment processors exchange sensitive card details for tokens so we can manage orders, refunds, and subscriptions without storing full card numbers.
- Encryption at Rest (Processor-Side): Our payment partners encrypt stored payment data within their systems and restrict access to authorized personnel only.
- Access Controls: Perfec-Tone staff never see your full card number or CVV. Access to order information is limited based on job role and purpose.
- Secure Cookies & Sessions: We follow platform best practices to help protect your account sessions on our store.
What We Store (and What We Don’t)
- We may store: Non-sensitive order details (order ID, last 4 digits of card number, card brand, transaction ID, authorization tokens) as provided by the payment processor.
- We never store: Full primary account number (PAN), card verification values (CVV/CVC), or track data.
Any card information you enter is submitted directly to the payment processor via their secure forms or hosted fields.
Fraud Prevention
- Risk Screening: Our payment partners apply automated fraud checks and risk scoring.
- 3-D Secure / SCA (where available): Additional verification (e.g., bank app or one-time code) may be required to complete payment.
- AVS/ZIP Checks: Address and postal code checks may be used to validate the cardholder.
Your Responsibilities
- Use a modern browser and keep your device OS and antivirus up to date.
- Shop only on pages that show https:// and the lock icon in your browser’s address bar.
- If your bank offers it, enable transaction alerts and 3-D Secure/SCA.
- Contact your bank immediately if you suspect unauthorized charges.
Never Share Card Details Over Email or Chat
Never send full card numbers, CVV codes or card photos by email, social media, SMS or chat. Our team will not request them through those channels.
Incident Response
If we become aware of a security issue that could affect your payment information, we will investigate promptly with our payment processors and, where appropriate, notify affected customers and relevant authorities in accordance with applicable laws.
Updates & Contact
We review this page periodically to reflect changes in technology, regulation, and best practices.
If you have security questions or believe you’ve encountered a vulnerability affecting our store, please email our team at hello@perfec-tone.com with the subject line Security. Please include steps to reproduce (no sensitive card data), affected URLs, and any relevant screenshots or headers.
Last updated: