Secure checkout infrastructure

This store runs on Shopify, and checkout is hosted and processed by Shopify and its payment partners rather than by us. Shopify holds PCI DSS Level 1 certification, the highest level of the card industry's security standard, and that certification — not ours — is what your card details pass through.

Every page on crivanto.com, checkout included, is served over an encrypted TLS connection; your browser will show a padlock in the address bar. If you ever reach a page asking for payment details without one, stop and email us before entering anything.

Card details are entered directly into the hosted checkout and tokenised there. They are not transmitted to Crivanto's systems, and we have no facility to store them.

What we can and cannot see

You do not need an account to place an order. If you choose to use one, sign-in is handled by Shopify's customer accounts system — we neither see nor store a password.

What we do with the information we do hold is set out in our Privacy Policy, and you can limit certain sharing through Your Privacy Choices.

Payment methods

The payment methods available to you are shown at checkout and are calculated from your location, your device and your currency. We do not print a list here, because the options you see may differ from the options someone in another country sees — and we would rather show you the truth at the moment you pay than a promise on a page.

Prices are shown in US dollars and exclude any import duty or tax charged by your destination country. We do not add a surcharge for any payment method.

Authorisation and fraud prevention

When you pay, your card issuer authorises the transaction — not us. Depending on your bank and your country you may be asked to confirm the payment through 3-D Secure or a similar step in your banking app. That prompt comes from your bank.

Orders are also screened automatically for indicators of fraud, including mismatches between the billing address and the card, and unusual ordering patterns. Where an order is flagged we may:

• hold it briefly and email you to confirm a detail before dispatch; or
• decline it and refund the payment in full, if we cannot verify it.

This is the same right set out in clause 4 of our Terms of Service. A declined order is refunded in full to the original payment method — we do not retain any part of a payment on an order we do not fulfil.

Pricing and charges

• Payment is taken once, at checkout. We do not store cards for later use, and we run no subscriptions or recurring billing of any kind.
• Your order is an offer to buy; the contract forms when we send the shipping confirmation. If we cannot fulfil an order we cancel it and refund you in full.
• Shipping is calculated and displayed before you pay, so the total you confirm is the total that is charged. Rates are in the Shipping Policy, and standard shipping within the United States is free.
• Import duty, VAT or GST and customs handling fees on orders shipped outside the United States are not included in what you pay us. They are charged by the destination country and are the recipient's responsibility.
• If your card is not held in US dollars, your bank converts the amount at its own rate and may add a foreign transaction fee. That conversion and that fee belong to your bank — we cannot see them and cannot reimburse them.
• Refunds are returned to the original payment method under our Return, Refund and Warranty Policy. We issue an approved refund within 5 business days; your bank may take a further 5 to 10 business days to post it.

Recognising a charge from us

The descriptor on your statement may appear as our trading name, as the name of our registered company, or as the name of the payment processor handling the transaction. If you see a charge you do not recognise, email us the amount and the date before you contact your bank — in most cases we can identify it quickly and save you a dispute.

If you believe a charge was genuinely unauthorised, contact your card issuer as well. They can block the card, which is something only they can do.

Keeping your details safe

We will never ask you for your full card number, your card security code, your PIN, your bank login or any password — not by email, and not in reply to a message you send us. We have no use for them and no way to accept them.

The only address we write from and reply to is info@crivanto.com. If you receive a message claiming to be from Crivanto that asks for payment details, or for payment by bank transfer or any route outside our checkout, it is not from us. Forward it to us and delete it.