This page explains how World Suprime handles payment card data and the security measures we apply.
1. Our commitment
World Suprime does not store, process or transmit full cardholder data on its own servers. Card details are collected directly by our payment processor through secure hosted payment fields.
2. How card data is handled
When you check out, your card details are entered into fields hosted by our PCI DSS Level 1 certified processor. The processor tokenizes the card and returns a token to us. We never see, store or log your full card number, CVC or expiry date.
3. Our PCI scope
Because card data never reaches our systems, our PCI DSS scope is limited to the pages that load the hosted payment fields. We complete an annual self-assessment appropriate for this model.
4. Security measures
- TLS encryption on every page and API request.
- Strict access control and logging on production systems.
- Regular dependency updates and security reviews.
- Fraud screening provided by our payment processor, including address verification.
5. Billing descriptor
All charges appear as "WORLDSUPRIME.COM". Every charge is a one-time payment for an order; we never create subscriptions.
6. Report a concern
If you notice anything suspicious, contact [email protected] or +1 (614) 000-0000.