CANNING POWER DISTRIBUTION LIMITED

PAYMENT SECURITY & STRIPE GATEWAY POLICY

Standard Compliance Statement for Digital Transactions 

1. OVERVIEW & PURPOSE

1.1. Canning Power Distribution Ltd ("the Company") manufactures and supplies heavy-duty portable electrical distribution equipment to industrial, commercial, and consumer markets. To ensure the highest level of financial safety for our clients, we utilize Stripe, a leading global payment processor, to handle our digital transaction infrastructure.

1.2. This policy outlines the security frameworks, encryption protocols, and data practices enforced by the Company and Stripe to safeguard your credit card, debit card, and corporate banking information during order fulfilment. 

2. STRIPE PAYMENT GATEWAY INTEGRATION

2.1. PCI-DSS Compliance: Stripe has been audited by an independent Quality Security Assessor (QSA) and is certified as a PCI Level 1 Service Provider. This is the most stringent level of security certification available in the payments industry.

2.2. Tokenisation and Zero-Storage Architecture: When you enter payment details into our website checkout or secure digital invoice links, the data is transmitted directly to Stripe via an encrypted connection.

2.3 The Company’s internal servers, networks, and staff members never see, transmit, or store your raw card numbers, CVV/CVC codes, or secure banking pin numbers. Stripe instantly replaces sensitive card data with a secure, single-use token. This entirely removes our local systems from the scope of handling raw cardholder data. 

3. DATA ENCRYPTION AND SECURITY MEASURES

3.1. Transport Layer Security (TLS): All online checkout pages, digital pro-forma links, and portal connections provided by the Company are strictly protected using Transport Layer Security (TLS) encryption. This ensures that data remains unreadable by unauthorized third parties during transit.

3.2. Advanced Encryption Standards (AES): Once Stripe receives your tokenized transaction details, all card numbers are encrypted at rest using AES-256 encryption keys. Stripe's infrastructure for storing, decrypting, and transmitting card numbers runs in separate, highly secure hosting environments. 

4. TRANSACTION VERIFICATION AND FRAUD PREVENTION

4.1. 3D Secure 2 (3DS): To comply with UK Strong Customer Authentication (SCA) regulations and protect our clients against identity theft, all eligible credit and debit card transactions run through 3D Secure verification protocols (such as Verified by Visa or Mastercard Identity Check). This may require you to verify your identity via your banking app or a one-time passcode before an order confirmation is authorized.

4.2. Stripe Radar AI Analytics: The Company utilizes Stripe’s machine-learning fraud detection systems (Stripe Radar). This automated system evaluates every transaction in real-time based on risk signals—including device fingerprints, proxy usage, IP locations, and historical fraud patterns—to instantly block unauthorized or compromised payment attempts. 

5. BUSINESS ACCOUNT EXCEPTIONS & WIRE TRANSFERS

5.1. Electronic Funds Transfer (EFT): For corporate clients, Public Limited Companies, or public sector bodies operating under our Net-30 credit account exception terms, payments made via BACS, CHAPS, or international wire transfers are routed directly into our secure corporate banking facilities.

5.2. Verification of Bank Details: To protect against invoice interception fraud, the Company will never change its corporate bank account details via email. Any changes to payment logistics will always be communicated via verified, secure, and physically signed letters on company letterhead.

6. REFUNDS AND CHARGEBACK PROCESSING

6.1. Eligible refunds (processed in accordance with Section 4 of our standard Terms and Conditions of Sale) will only be re-credited to the exact card or bank account originally used to make the purchase. Under no circumstances will the Company process refunds via alternative cards or cash payouts.

6.2. In the event of an unverified transaction dispute or chargeback notice, the Company reserves the right to freeze production or withhold shipment of any associated custom-built distribution units until a full financial investigation is resolved with Stripe and the card-issuing bank. 

7. CONTACT INFORMATION

If you have any questions regarding our digital payment interfaces, wish to verify the legitimacy of a Stripe payment link, or require support regarding a processed transaction, please email our team at info@canpwr.co.uk