Payment Security

Your card number, expiry date and security code are typed into a field that is hosted and served by our payment provider, not by this website. The details go straight from your browser to that provider over TLS.

This website never receives, stores, processes or transmits a full card number. What comes back to us is a token — a meaningless reference that lets us take the payment you authorised and nothing else — along with the card brand, the last four digits, the issuing country and the card type.

This is the same architecture that lets us keep the smallest possible cardholder-data footprint: there is no card number anywhere on our systems to lose.

Every page on valueskinco.com is served over HTTPS with TLS 1.2 or higher, with HSTS enabled. Look for the padlock in the address bar; if it is not there, do not enter a card.

The card field itself adds a second layer: it is served from our payment provider on its own encrypted connection, so the card number is protected independently of this site.

Our payment provider is certified to PCI DSS Level 1, the highest level defined by the Payment Card Industry Security Standards Council, and is assessed annually by an independent Qualified Security Assessor.

Because card details are captured entirely inside their hosted field, this store falls into the lightest PCI scope available to an e-commerce merchant. We deliberately built it that way.

We support 3-D Secure — the step where your bank asks you to confirm a payment, which you may know as Verified by Visa, Mastercard Identity Check or American Express SafeKey. Your issuer decides when to ask; if it does, you will see it during checkout.

Every order is screened for fraud before it is accepted. If something needs a second look we will email you rather than silently cancel the order.

We ask for the billing address registered to your card, separately from where you want the parcel sent. That check protects you as much as us — a card used without your knowledge usually fails it.

Your card statement will show VALUE SKIN CO. It will not show anything else.

If a line on your statement does not look familiar, email hello@valueskinco.com or call us before you contact your bank. We can find the order and sort it out the same day, and it saves you the weeks a dispute takes.