Caritas Australia takes the following precautions towards keeping your personal information safe.
Your transactions with Caritas Australia are protected by DigiCert using the latest SHA2 SSL (Secure Sockets Layer) encryption technology that securely passes transaction data to our payment gateway, PayStream, a PCI DSS Tier 1 certified service provider. To read more about Paystream’s security, see here.
Any personal information collected directly by Caritas Australia is stored on secure servers hosted in the Microsoft Azure platforms secured facilities. Information stored on our web server computer is protected by Azure’s security-in-depth. A restricted number of authorised Caritas Australia staff has access to this system. To read more about Azure Infrastructure as a Service Security, see here.
Caritas Australia uses a credit card transaction gateway provided by PayStream to process your credit card transactions. With this payment option, credit card data is encrypted with asymmetric encryption, with a keypair uniquely assigned, along with a 2048-bit passphrase required to decrypt the card data.
On the credit card transaction system, several screens appear during the payment process. When you submit your credit card details, they are encrypted and sent to PayStream for processing and you will receive a confirmation that your transaction was successful. Caritas Australia will also send you an email confirming the transaction.
While Caritas Australia takes utmost care in the security of your data on our systems, we are not responsible for any unauthorised access to your personal information or loss of or corruption of data caused by any computer virus or trojan or via any system from an Internet Service Provider linking your computer system with ours.
If you have any reason to believe that there has been unauthorised use of your personal information, such as your credit card details, please notify us immediately on our toll-free number 1800 024 413.
Questions about privacy should be directed to the Privacy Focal Point, firstname.lastname@example.org.