Security

Security is extremely important to us here at CalSport and we have numerous security measures in place to protect against the loss, misuse or alteration of information that we have collected from you.

Financial information such as credit card numbers and expiration dates are used only to take payment for the products you are purchasing.

Your financial information is handled a little differently depending upon which payment method you choose:

Paypal
Your payment details are never passed to or seen by CalSport. You approve the payment on the paypal website, and we are simply given an authorization number indicating that PayPal has confirmed you have funds available and that you have passed all security & fraud checks.

As we never see any of your payment details, the PayPal Security & Privacy Policy applies because they handle the actual transaction processing on our behalf.

Google Checkout

Your payment details are never passed to or seen by CalSport. You approve the payment on the Google website, and we are simply given an authorization number indicating that Google has confirmed you have funds available & you have passed all security/fraud checks.

As we never see any of your payment details, the Google Security & Privacy Policy applies because they handle the actual transaction processing on our behalf.

Credit Card Payment (entering your card number on the CalSport website)

Your credit card information is submitted online directly to the secure payment gateway and is never seen or stored by CalSport.
Our payment gateway providers operate under the following policies:

Transaction security

All transaction information passed between the CalSport website and the Protx systems is encrypted using 128-bit SSL certificates. No card-holder information is ever passed unencrypted and any messages sent to CalSport from Protx are signed using MD5 hashing to prevent tampering. You can be completely secure in the knowledge that nothing you pass to the Protx servers can be examined, used or modified by any third parties attempting to gain access to sensitive information.

Encryption and Data Storage

Once on the Protx systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign's Global Root certificate, making them all but impossible to extract. The data we hold is extremely secure and we are regularly audited by the banks and banking authorities to ensure it remains so.

Links to banks

Protx have multiple private links into the banking network that are completely separate from the Internet and which do not cross any publicly accessible networks. Any card-holder information sent to the banks and any authorisation message coming back is secure and cannot be tampered with.

Employee access

No individuals within Protx are able to decrypt transaction information or card-holder data. Our systems only allow access to our most senior staff and only in extenuating circumstances (such as investigations of Card Fraud by the Police). Your transaction information and customer card information is secure even form our own employees because our systems never display the full card numbers, even on administration screens.

Although we strive to protect such information, CalSport cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk. Once we receive your transmission, we take reasonable steps to preserve the security of the information in our own systems. We regularly review developments in security and encryption technologies.