Payment & Security
How your card details are handled, in plain terms
The short version: we never see your full card number, it is never stored on our systems, and the page you type it into is encrypted end to end. Below is what that actually means.
We do not hold your card
When you pay, the card fields at checkout are served and processed by our payment providers, not by us. Your card number goes straight to them. What comes back to Ferzalon is an authorisation result, the last four digits, and the card type — enough to match a payment to an order and to process a refund, and nothing more.
That means there is no file anywhere in this business containing your card number. It is the single most useful security property a small shop can have, because you cannot lose what you never held.
The technical part
Encrypted connection
Every page on ferzalon.com is served over TLS, checkout included. Your browser will show a padlock. If it ever does not, stop and email us.
PCI DSS
Card data is handled by PCI DSS compliant providers. That is the card industry's own security standard, audited independently — not a claim we make about ourselves.
3-D Secure
Your bank may ask you to confirm the payment in its own app or by a code. That step happens between you and your bank; we are not part of it and cannot see it.
Fraud checks
Orders are screened for the usual signals — mismatched billing and delivery, unusual velocity. Occasionally a legitimate order is flagged; if that happens we email you rather than cancelling silently.
When you are charged
Payment is taken when you place the order, not when it ships. If we cannot fulfil something — a design has run out, or we cannot ship to your address — we cancel and refund in full, to the original payment method.
Refunds are issued to the card or account you paid with. Once we process one it usually appears within 3 to 10 business days depending on your bank; that part is out of our hands.
What we do with your details
We use your name, address and email to take payment, ship the order and answer questions about it. We do not sell personal information and we do not pass it to anyone except the parties who need it to complete the job — the payment provider and the carrier. The full account is in our Privacy policy.
If something looks wrong
If you see a charge from us you do not recognise, or an email that claims to be us and asks for card details, email info@ferzalon.com and we will look into it the same business day. We will never email you asking for a card number, a password or a one-time code.