Payment Security Policy

1. How card details are handled

Card payments are not currently enabled on this website. Registrations are submitted here and the secretariat follows up with settlement instructions. No card details are collected by this site.

2. What we never store

• Full card numbers
• Card expiry dates
• Card security codes (CVV / CVC)
• Card PINs or magnetic-stripe data

We will never ask you to send card details by email, through the contact form, or over the telephone. If you receive such a request claiming to come from us, do not answer it and tell us at info@ecbankers.org.

3. How this website is secured

• All pages are served over HTTPS with TLS. Requests over plain HTTP are redirected, and HTTP Strict Transport Security is enforced in production.
• The connection to our payment provider is mutually authenticated: both ends present a certificate, so the transaction cannot be submitted or intercepted by anything else.
• A Content Security Policy, frame protection and strict referrer rules are applied to every response, which limits the injection and clickjacking routes commonly used to skim payment pages.
• The payment form is protected against cross-site request forgery, and payment attempts are rate limited to prevent cards being tested in bulk against our systems.
• A registration can only be paid for by the account that submitted it.
• Accounts are protected by hashed passwords, optional two-factor authentication and passkeys, lockout after repeated failed sign-ins, and a 30-minute inactivity timeout.
• Administrative access to registration and payment records is limited to authorised secretariat staff and is separately authenticated.

4. Fraud and sanctions screening

Transactions may be screened by the payment provider and by us for fraud and sanctions risk. A transaction that fails screening will be declined, and where a payment has already been taken it will be refunded to the original card.

5. Cards accepted

We accept Visa and Mastercard. All transactions are billed in XCD (EC$), and the merchant outlet country is Saint Lucia.

6. Reporting a security concern

Email info@ecbankers.org or call +1 (268) 720-4323. If you believe a payment on your card was not authorised by you, contact your card issuer as well as us.