1. Card processing
Card payments are processed by Stripe. Your card details are entered directly on Stripe's own secure payment page. That information never passes through our servers and is never stored by us, which keeps our PCI scope at the minimum level (SAQ A).
2. Encryption
All traffic between your browser, this site and the payment processor runs over encrypted connections (TLS/HTTPS).
3. Cardholder authentication
Transactions may be protected by the card networks' own authentication programmes — Visa Secure and Mastercard ID Check — which verify your identity with your issuing bank before the payment is approved.
4. Access to your data
Access to order and guest data is restricted to the staff who need it to prepare and deliver your order, over authenticated accounts. Our infrastructure providers are listed in the Privacy Policy.
5. Reporting a problem
If you believe you have found a security problem, write to us at hello@grolist.do and we will look into it. Please do not post it publicly before we have had a chance to respond.
