Security

Security is probably one of the most significant concerns for both the shopper and the retailer during an online transaction. In reality, an online transaction is probably more secure than a card transaction in a shop or conducted over the telephone or by fax, as the information transmitted online is strongly encrypted using complicated logarithm combinations.

IBLF uses the WorldPay payment system, which uses a combination of both established and innovative techniques to ensure the security and integrity of all sensitive data. Worldpays public web servers are certified by Thawte, a public Certificate Authority, ensuring that both the shopper and retailer can have confidence that nobody can impersonate WorldPay to obtain confidential information.

Transaction Encryption
The transfer of the purchase details from the IBLF site to our payment providers are encapsulated using encrypted and digitally signed protocol. This uses a combination of standard methods such as PGP, RSA and MD5 to ensure that the information passed is secure and tamper-proof via SSL.

Security for the Shopper
Any communication during the payment process is also encrypted to the maximum strength supported by the shopper's browser using 128 Bit SSL. Shoppers are also protected from fraudulent use of their card in a "card not present" environment, by their card issuers. The card issuers provide the right for shopper to dispute a transaction if the goods/services did not arrive or if the card was used fraudulently.

Data Storage
Data storage on WorldPay systems, and the communication between WorldPay and the worldwide banking networks, is regularly audited by the banking authorities to ensure a secure transaction environment. We also ensure that we stay up-to-date with the latest versions of any third-party code we use, and continually review our own proprietary code.

Privacy

IBLF recognises the concern of our customers regarding privacy of information. All information you give to IBLF is stored securely, and is not accessible to other users.

Any information you give to IBLF will not be distributed to any other company outside of the IBLF Group or its affiliated partners. We are committed to protecting your privacy. We will only use the information that we collect about you lawfully (in accordance with the Data Protection Act 1998).

We collect information about you for 2 reasons: firstly, to process your order and second, to provide you with the best possible service.

We will email you to keep you up to date with your orders; however, we will not send you marketing emails unless you have given us your consent. We will also give you the opportunity to unsubscribe on all marketing emails and you may unsubscribe yourself on your online profile at any time.

The type of information we will collect about you includes:

• your name
• address
• phone number
• email address
• credit/debit card details

We will never collect sensitive information about you without your explicit consent.

We will endeavour to keep the information we hold accurate and up to date. You can check the information that we hold about you by emailing us. If you find any inaccuracies we will delete or correct it promptly

The personal information that we hold will be held securely in accordance with our internal security policy and the law.

If we intend to transfer your information outside the EEA (European Economic Area) we will always obtain your consent first.

IBLF relies on the use of cookies to process orders. Whilst you do not need to allow your browser to accept cookies in order to browse much of our website, you must have cookies enabled if you wish to shop or register at IBLF.

Cookies are small pieces of information sent by a web server to a web browser, which allows the server to uniquely identify the browser on each page. IBLF Online use 'session cookies' which are automatically deleted from your computer when you close your browser. You are always free to decline our cookies if your browser permits, although in that case you may not be able to place an order on our website.

If you have any questions/comments about privacy, you should contact us at the following mail address:

steve.metcalfe@iblf.org