Why Shopping Is Safe at BudToBlooms.com
1. Our secure server software encrypts all of your personal information including credit card number, name, address, and order information, so that it cannot be read as it travels over the Internet. Encryption takes data and converts it into a format that is virtually impossible to read without the proper software.
2. Most banks and credit card companies either cover all the charges that result from unauthorized use of your credit card or may limit your liability to as low as $50.
3. If your bank holds you liable, we will cover up to $50 provided that the unauthorized use of your credit card occurred through no fault of your own from purchases made at the website while using the secure server. Note: In the event of unauthorized use of your credit card, you must notify your credit card provider in accordance with its reporting rules and procedures. If you have any questions regarding online shopping, please contact us by email at BudToBlooms@pa.net.
About ECI-Pay Credit Card Processing
The ECI-PAY gateway has security measures in place to protect the loss, misuse and alteration of the information under our control. Security of information in transit to and from our web site is encrypted using SSL encryption protocols. We store all user information in secure databases protected via a variety of access controls as well as using encryption of sensitive information. ECI has been providing credit card processing services over the Internet for over 6 years. Currently we process credit card transactions for over 16,000 merchants worldwide.
Security systems are designed and upgraded in concert with Sun Microsystems and RSA Security and are Eyes Only. Our policy is to report and aggressively pursue, apprehend and prosecute any attempts to breach our systems. To date there have been no successful attempts.
This is a brief overview:
Redundant Sun Microsystems Enterprise 3500 payment-dedicated network servers with four Ultra SparcԠprocessors with at least 1 gigabyte of RAM per unit, running UNIX and the most recent version of Solaris. Our system also features symmetrical failover using Veritas FirstwatchԠ and HA for Oracle, and sits behind a Cisco PIX Firewall which also has redundant failover.
Our payment servers are housed at Level (3) facilities in New York City, a state-of-the-art global network that sets new standards for the industry (http://www.level3.com): Physical access protected with biometric (palm scan) identification; Uninterruptible Power Source (UPS) with generator back-up; 24 x 7 worldwide network monitoring. Access to servers is protected via cardkey, palm print and key lock.
All credit card numbers are stored on our Oracle-dedicated Sun E3500 database server.
All credit card numbers are encrypted in real-time within the database using 512 bit RSA Crypto-C technology. RSA Security submits its Crypto-C products for FIPS 140 testing and certification. FIPS 140-1 and the forthcoming FIPS 140-2 are the US Government's standards that specify the security requirements to be satisfied by a cryptographic module. RSA Security supports PNP Security with over 20 years of experience in the security industry.