Secure payments

 

We use the SSL (Secure Sockets Layer) protocol to encrypt transactions between your browser and Stripe’s servers, both when you place an order and when you create or manage your customer account. To check that the protocol is active, look for https:// in your browser’s address bar.

 

Nobody can access your card details during payment. That data (number, security code and expiry date) is never stored by flocea.com.

 

 

flocea.com uses STRIPE, a payment provider certified to PCI DSS Service Provider Level 2.

 

With STRIPE, you have the following safeguards:

 

Your data is fully protected:

your card transactions are handled directly on STRIPE’s SSL platform, secured by encryption (128-bit key) and authentication technology.

 

A payment platform certified by VISA and MASTERCARD 3D Secure:

STRIPE holds PCI DSS certification from Visa and MasterCard, which demands the strictest control over financial data held, processed and transmitted.

 

For public bodies we are a Chorus Pro partner (the French public-sector e-invoicing platform). 

 

 

SHA-1 encryption secures all the purchase data passing through the platform.

 

For our customers’ security, your card numbers are never passed to us and are therefore never stored by our staff or on our servers.

 

The payments you make on flocea.com are secured through our partner STRIPE.

 

 

3-D Secure (or 3DS) protects merchants and shoppers against fraudulent card use by adding a second layer of security when a payment is completed.

 

Once you have entered your card details, you are taken to your bank’s site and asked to confirm that you are the cardholder using an authentication method: a code sent by text, or entering your date of birth, for example.

 

 

3-D Secure is a key defence against chargebacks, because that second layer of authentication makes life considerably harder for a would-be fraudster.

 

3-D Secure is proven to reduce the rate of fraud-related non-payment.

 

How is the data protected?

 

When you buy on our site through STRIPE, you are taken to a STRIPE payment page fully secured by HTTPS. The payment therefore takes place directly on STRIPE’s secure server.

 

Sensitive data such as your card number and its expiry date is fully encrypted and protected by TLS, so that the information exchanged cannot be intercepted in the clear by a third party during the transaction.

 

Card numbers are encrypted instantly and are not accessible to STRIPE’s merchants.

 

STRIPE also does not retain card numbers and relies on a secure infrastructure meeting the international PCI DSS standard. To find out more about that standard

 

All the pages on STRIPE’s website, and the transmission links, are secured with TLS and carry a Thawte Extended Validation security certificate.

 

 

The acronyms SSL (“Secure Socket Layer”) and TLS (“Transport Layer Security”) refer to security protocols designed to keep information exchanged over the internet between applications and users confidential. They allow your card details to be transmitted entirely securely.

 

TLS is a newer, safer version of SSL. It has two layers: the TLS Record protocol and the TLS Handshake protocol.

 

The first layer provides a secure connection using methods such as DES (Data Encryption Standard). It can also be used without encryption.

 

The second layer lets the server and the computer identify each other, then agree an encryption algorithm and secret keys before they begin exchanging data or messages.