Security
Payment & Security
We sell earrings for under fifty dollars. You should not have to think hard about handing us a card number. This page says who actually processes the payment, what we can and cannot see, and how to tell a real message from us from a fake one.
Who takes the payment
Checkout on this store runs on Shopify's hosted checkout. Card details go from your browser to Shopify's payment infrastructure directly. They do not pass through a Mirethax system and they are not stored on anything we control.
Shopify is certified to PCI DSS Level 1, the highest of the four merchant compliance levels the card networks define. That certification covers the checkout and the card handling behind it. It is not something we claim for ourselves.
Which payment methods you see at checkout depends on your country. If one you expect is missing, it is unavailable in your market rather than switched off for you.
What we can see, and what we cannot
| Detail | Visible to Mirethax |
|---|---|
| Full card number | No. We never see it at any point, and it is never transmitted to us. |
| Security code | No. Used once to authorise and retained by nobody, including the processor. |
| Card expiry date | No. |
| Card brand and last four digits | Yes. On the order record, so we can match a payment to a refund or a dispute. |
| Cardholder name and billing address | Yes. Needed for fraud screening and for the order record. |
| Shipping address, email | Yes. We need these to ship the order and tell you it has shipped. |
| Your bank login or balance | No. Nothing on this site ever asks for one. |
If you pay through a phone or browser wallet, the card number is replaced with a one-time token before it reaches anyone, so even the processor does not handle the underlying number.
The technical bits, briefly
Encrypted in transit
Every page here, not just the checkout, is served over TLS. Your browser will show a lock. If it ever does not, stop and email us before entering anything.
No card vault of our own
We do not run a database of card details, because we do not have card details. There is nothing here to steal even if someone got in.
Limited staff access
Order records are reachable only through the store admin, by named accounts with their own logins. Nobody handling your order sees more than the table above.
Things we will never do
- We will never email or message you asking for a card number, a security code, a bank login or a one-time passcode.
- We will never telephone you about a payment problem. We do not operate a customer phone line at all — email is our only channel.
- We will never ask you to pay by bank transfer, gift card, wire or cryptocurrency. Checkout is the only way to pay us.
- We will never ask you to install software, share your screen or grant remote access to fix an order.
- We will never sell, rent or trade your personal information.
- We will never send a payment link from an address that is not our own domain.
Checking that a message is really from us
Genuine mail from us comes from an address ending @mirethax.com. Anything from a lookalike domain, a free mailbox, or a spelling one letter off is not ours. When in doubt, do not click the link — open mirethax.com yourself and write to us from the contact page.
On your statement
The charge shows as MIRETHAX. Some banks display the registered company name instead, in which case you will see GALLOP ENERGY TECHNOLOGY LIMITED. Both are us. If you see a charge you do not recognise, contact us before disputing it and we will find the order.
If something looks wrong
Email info@mirethax.com with the order number, and if it is a suspicious message, forward it with the full headers if you can get them. We would rather see ten false alarms than miss one real one.
If a card has been used without permission
Tell your bank first — they can stop the card and we cannot. Then tell us. We will cancel any unshipped order on that payment immediately and give you whatever we hold on it to support your claim.
What happens to your details afterwards
We keep order records as long as tax and accounting law requires, and to handle returns. We do not build advertising profiles from your purchase history, and we do not pass your details to anyone except the parties that have to see them to get the parcel to you — the payment processor, the carrier, and the platform the store runs on.
You can ask what we hold, ask for it to be corrected, or ask for it to be deleted where we are not legally required to keep it. Email us; there is no form. The full detail is in our Privacy Policy.
A question this page did not answer?
Email us and a person will reply, usually within one business day.