Here at Joots our web team has worked hard to ensure our site is as safe as it can be for our customers. To summarise:
Use of SSL Security:
On secure parts of our website where you enter your details or change existing information (such as account details) this is done over a secure encrypted connection. Keep an eye out for the 'https:' in your browser address bar + a padlock in your browser.
![https at joots](http://www.joots.co.uk/jootsjewelleryblog/wp-content/uploads/2010/12/https-at-joots-300x20.gif)
Our site encryption (SSL) is provided by Comodo a global leader in proving website security. Other companies that use them include Virgin, the BBC, Skype, Vodafone and Which Magazine.
![horz_master_120pixels](http://www.joots.co.uk/jootsjewelleryblog/wp-content/uploads/2010/12/horz_master_120pixels.gif)
Use of separate payment processors:
Many sites store your card details as part of the checkout process (or partially record them). Here at Joots we've decided to leave looking after your card details to Barclays plc, Google or Paypal (depending on how you choose to pay). When you checkout, you'll be transferred to one of these to enter your card details. Their servers are secure and always upto date with the latest security technology, keeping you safe online. Joots has no visibility of your card number, we just keep a record of your name and address so that we can post you your products upon successful payment. For more details check our dedicated payment methods at Joots page.
We're PCI DSS Compliant:
For full details of what PCI DSS compliance means click here. To summarise, we implement a variety of measures to ensure cardholder information is handled securely. We use secure servers based here in the UK. SSL security where required. Our site is regularly tested by external parties to ensure our servers are secure, so that we can maintain compliance with this PCI DSS standard.
![JOOTS Jewellery has been verified as Credit Card Safe. SecurityMetrics for PCI Compliance, QSA, IDS, Penetration Testing, Forensics, and Vulnerability Assessment SecurityMetrics for PCI Compliance, QSA, IDS, Penetration Testing, Forensics, and Vulnerability Assessment](https://www.securitymetrics.com/images/sm_ccsafe_check1.gif)
Data Protection Compliance:
We comply with the UK Data Compliance regulations and are registered with the UK Data Commissioner. Any customer data held is protected by passwords and on secure servers. Any paper based correspondence is shredded when no longer required. We do not/and will never share customer data with any 3rd party.
To finish off; here's some questions to ask when shopping online:
- When entering details do you see https, a padlock and other signs that the site is secure? (See above for JOOTS Jewellery's security credentials)
- Does the website have a clear privacy policy. i.e. what does the site do with your data?
- Does the site display clear contact details (telephone, bricks and mortar address)
- If unsure of the site can you pay with paypal or google checkout?
Thanks goes to our web team and 3rd party suppliers for helping to ensure JOOTS Jewellery is upto date with the current requirements and best practice in the industry to ensure we provide our customers with a safe shopping experience.