Payment Security & PCI Compliance

1. Overview of Payment Infrastructure

At Cazima's Store, protecting customer financial data and ensuring secure transactions is our top priority. All credit card processing, digital wallet payments, and payment invoice handling for both ready collection purchases and custom procurement services are powered by Stripe, Inc.

2. PCI-DSS Compliance Standard

The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organizations that handle branded credit cards from the major card schemes.

Stripe is audited by an independent PCI Qualified Security Assessor (QSA) and is certified as a PCI Level 1 Service Provider. This represents the highest and most rigorous level of security certification available within the global payments industry.

3. End-to-End Encryption & Tokenization

All payment input forms and checkout links transmit data directly from your browser or device to Stripe using Transport Layer Security (TLS 1.2 / 1.3) with 256-bit AES encryption.

• Direct Client Encryption: Payment elements are isolated in secure, sandboxed iframes hosted directly by Stripe.
• Tokenization: Sensitive card details are converted into unique cryptographic tokens by Stripe. Cazima's Store only receives secure token references to confirm transaction completion.

4. Fraud Prevention & 3D Secure 2.0 (3DS)

To protect against unauthorized transactions and identity theft, our payment gateway supports Strong Customer Authentication (SCA) and 3D Secure 2.0 protocol (such as Visa Secure and Mastercard Identity Check).

During payment processing, your issuing bank may request biometric authentication, a mobile app push notification, or a one-time passcode (OTP) to verify cardholder authorization.

5. Supported Payment Methods

Through Stripe, Cazima's Store securely accepts payments in GBP (£) and major currencies via:

• Visa, Mastercard, American Express, and major debit cards
• Apple Pay and Google Pay
• Secure electronic invoice links generated via Stripe Billing for custom procurement orders