Security

Help > Security

Overview

If you’ve never purchased online before, we have summarised the main concerns about purchasing online and give you a realistic perspective regarding the risks to you.

keen2learn use Sage Pay – formally Protx – (payment service provider) to ensure your credit / debit card details are kept safe against fraud. All data passed between our site and Sage Pay (e.g. your name and address) is encrypted, therefore all credit/debit card details are only input once you have been directed to the Sage Pay secure payment system. No personal or sensitive data (e.g. credit card information) is stored on our webserver. Any credit care details you supply to us will be kept on the Sage Pay server for increased security.

‘Card not present’ (CNP) fraud

Internet, telephone and mail order transactions are all classified as ‘Card not present’ transactions because the card-holder and card are not physically present for signatures. According to the Association for Payment Clearing Services (APACS), ‘Card not present’ fraud accounts for around 2% of all card fraud in the UK. APACS have also found that:

Most cases of internet fraud result when card details obtained fraudulently in the real world are then used to purchase online.
The incidence of hackers obtaining card details through merchant databases is very low.
The risk to customers is further reduced if they use a certified organisation to encrypt data such as Protx.

Additional Security with ‘3D Secure’

An additional page has been added to the payment process. When you are redirected across to Sage Pay you will be presented with a page containing the credit and debit card logos. Select the card you wish to use and then you will be asked for the card details (card number, expiry date, CV2 etc.) on a subsequent screen.

On completion of the card details screen, you will be shown our new order confirmation screen. This will display the contents of your Basket field and order, address and card summary details as well as the option to go back to change the card you have chosen to use.

If you have 3D-Secure enabled on your account, offered by MasterCard Secure code and Verified by Visa the Issuing Bank verification screen will now appear inside a Sage Pay window (using Inline Frames, as recommended by the card schemes) and ask you for your confidential password details.

The final Authorisation screen now displays a simple progress-bar style animation so that you know that the system is working whilst Sage Pay are talking to your acquiring bank. This replaces the rather dull “Authorising please wait.” message that used to appear.

The new pages are fully multi-language compliant. They can detect the language settings in your browser and display the payment pages in that language.

Our Privacy Policy

Our highest priority is to keep sensitive information safe and private while making the online shopping experience as simple as possible.

When you are directed to Sage Pay Secure Server, you have the option to store your name and billing address in a secure e-wallet, so when shopping with us in future you need only provide your username, password and preferred payment method. The transaction process is simple and there is a full audit trail of where and how much has been spent. Customers also have the option to shop with complete anonymity.

Security

We understand that you’re concerned about the security and privacy of your online transactions. This is why we use Comodo to ensure that your valuable data, such as credit card details, are encrypted when you interact with our site.

How do you secure my payment information?

We employ state-of-the-art data encryption to ensure safe and secure transactions to our site.
Your computer and ours agree to transpose whatever we are sending into an unintelligible “hash” of characters, using a technology called SSL. For example:

3048 0241 00C9 18FA CF8D EB2D EFD5 FD37 89B9 E069 EA97 FC20 5E35 F577 EE31 C4FB C6E4 4811 7D86 BC8F BAFA 362F 922B F01B 2F40 C744 2654 C0DD 2881 D673 CA2B 4003 C266 E2CD CB02 0301 0001

Without the information on your computer or ours, no one can understand our encrypted communication.
For your safety, please expect anyone who communicates confidential information with you on the Internet to use encryption, the way we do.

What is SSL?

Secure Sockets Layer, SSL, is the security technology for encrypting a link between a web server and a browser. All data passed between our web server and your browser remains private and secure.
The Most Trusted 2048-bit Certificate #1 Provider of Higher Assurance Certificates
Comodo’s 2048-bit certificates provide strong protection for years to come with the most trusted root keys.

Whenever you communicate with us on our payment pages, a small yellow padlock appears in the bottom right-hand corner of your browser as a sign that we are now engaging SSL. (Another sign on some browsers is that when you enter the secure area of the site, the background of the address bar turns dark yellow or bright green. You’ll also notice that http:// is replaced by https:// (The ’s’ stands for ‘Secure’).

How do I know you are a real organization?

To generate an encrypted SSL transmission, a web server requires an SSL Certificate. Checking a website’s certificate is good practice that helps you avoid spoof websites, sometimes called “phishing” sites. To check the certificate, click on the padlock. Your browser will show you the name of the owner of the certificate. This name should match the name of the website operator.

Our SSL certificates are issued by a leading certificate authority, Comodo CA. Comodo is Web Trust-compliant, meaning that their business practices and processes have been rigorously audited according to AICPA (American Institute of Certified Public Accountants) guidelines by an independent approved auditor (Ernst & Young).
Comodo High Assurance certificates enable a high level of encryption. They also confirm that a company is a legally accountable organization.

To receive a High Assurance SSL Certificate from Comodo, we had to demonstrate to them that we are an existing business, along with our control over the domain you are visiting. When you shop online, you deserve to be know who you are interacting with.
Seeing a site with a High Assurance SSL Certificate, confirms two essential factors: