Trust & Security

We take the security of your order, your payment details, and your personal data seriously. This page explains what we do to protect you and what you can expect from us.

Secure checkout

SSL/TLS encryption. Every page on this site — including product pages, cart, and checkout — is served over HTTPS with a valid TLS 1.3 certificate. Look for the padlock in your browser.
PCI-DSS Level 1 compliance. Our checkout is powered by Shopify, which maintains the highest level of payment-card industry certification (audited annually).
3-D Secure 2 & AVS. High-risk transactions are challenged with 3-D Secure authentication (your bank's app or SMS code). Billing-address verification is enabled on every card payment.
We never see your card. Card numbers are tokenized by the payment processor. Our staff cannot view full card numbers, CVVs, or ACH account numbers at any time.

Fraud protection

Every order is screened in real time by Shopify's machine-learning fraud engine.
Orders flagged as medium or high risk are held for manual review before fulfillment. We may contact you to verify identity if the billing and shipping addresses do not match.
We reserve the right to cancel and refund any order that shows signs of fraud (stolen card, proxy/VPN plus mismatched address, known-fraud email domain, etc.).
We cooperate fully with card issuers and law enforcement in chargeback and fraud investigations.

Your data

We only collect the data needed to fulfill your order, prevent fraud, and comply with tax and consumer-protection law.
We do not sell your personal information. See our privacy policy and Your Privacy Choices page.
You can request access to, correction of, or deletion of your data by writing to info@sshca.net with the subject "Data request."

Account security

Customer accounts on Surrey Six use Shopify's passwordless login (one-time code by email) — there is no password to steal.
We will never email you asking for your password, card number, or a wire transfer.
Official communication comes from @sshca.net or @surreysixco.com. If you receive a suspicious message, forward it to info@sshca.net.

Reporting a problem

If you believe your Surrey Six account or order has been compromised, write immediately to info@sshca.net with the subject "Security." We will respond within one business day.