Payment details never reach us
We do not take card numbers on this site. Payment is completed on the pages of our payment providers, Stripe and PayPal, who are subject to the card industry's own security standards. We never see, handle or store your full card number, so there is no card data on our systems to lose.
How the site is built
The site is served over an encrypted HTTPS connection, so anything you send from a form travels encrypted. Orders and customer details are kept in a database on our hosting provider's servers. It is not reachable from the internet except through the site itself.
Signing in
Customers sign in with a one time link sent to their email address, which works once and expires, so there is no password to steal or reuse. The people who run the shop sign in to the admin area with passkeys or a link sent to a named address, and nobody else can ask for a link.
Access
Access to order records is limited to the people who need it to pack, ship and support orders. Accounts are individual rather than shared, and access is removed when it is no longer needed.
Keeping data only as long as it is useful
We hold order records for six years to meet HMRC requirements, and correspondence for three years. After that it is deleted. We do not keep marketing lists of people who have not asked to hear from us.
Suppliers
We use a small number of suppliers, such as our payment providers, our hosting and email provider and our couriers. Each is chosen partly on the security they offer, and each is given only the data it needs to do its job.
If something goes wrong
If a breach happens that is likely to risk your rights or freedoms, we will report it to the Information Commissioner's Office within 72 hours of becoming aware of it, and we will tell you directly where the risk to you is high.
Your part
Please do not send card details, passwords or copies of identity documents to us by email. We will never ask you for them. If you receive a message claiming to be from us and asking for any of those, it is not from us, and we would be grateful if you would forward it to infobebekcustoms.com.
Questions
Write to us at infobebekcustoms.com or Innovatus International Ltd (company number 13066723, registered in England and Wales), 31 Louisberg Road, Hemswell Cliff, Gainsborough, DN21 5XU, England.