Security

Crownhill Associates takes every care to ensure your shopping experience is safe and secure.

• We run a dedicated webserver which is kept up to date with security patches and updates as they are released
• Your order transaction is processed using 128bit SSL encryption provided by GoDaddy.
• Your credit card details are sent separately using very strong (1024+ bit) GPG encryption
• Sensitive information that we collect from you during your order process is never stored on our webservers, and is dealt with offline.

Data Protection / Privacy Policy

We are committed to protecting your privacy, and we will only use the information that we collect about you lawfully (in accordance with the Data Protection Act 1998).

We collect information about you for 2 reasons: firstly, to process your order and second, to provide you with the best possible service.

We will never collect sensitive information about you without your explicit consent. To the best of our ability the information we hold will be accurate and up to date. You can check the information that we hold about you by emailing us. If you find any inaccuracies we will delete or correct it promptly.

The personal information which we hold will be held securely in accordance with our internal security policy and the law.

If you have any questions/comments about privacy, you should email us.

The type of information we will collect about you includes:

• Your name
• Address
• Phone number
• E-mail address
• Credit/debit card details

Security Technologies we utilise

SSL

Our payment page uses the industry standard SSL Encryption. If you've ordered from the Net before you'll have probably heard of this, but may not know what it means. Essentially, SSL puts a secure tunnel between your web browser and our web server, ensuring no-one else can see what is passed between your browser and our web server. The most important thing you need to know is that it's very secure, and is used around by businesses and individuals all around the world for secure e-commerce transactions.

You can find out more information about SSL at the Verisign SSL Basics webpage

GnuPG

As well as securing your card details between the web browser and our server, we go one step further in securing your credit card information. When our server receives your card details, they are encrypted using a technology roughly ten times more secure than SSL, known as GnuPG. After the details are encrypted, they're removed from our server and sent via email to our Sales department, who are then able to decrypt the details and process your order. If anyone manages to intercept the email on its way to us, they'll be completely unable to decipher the contents because they don't have the key.