Your Payment Security is Our Priority
At Sasyajalakam Roots, we take the security of your financial information very
seriously. We employ industry-leading security measures to protect your data during
payment processing.
1. Secure Payment Gateway
We use Razorpay, a trusted and secure payment gateway in India.
Razorpay is:
- India's leading payment processor
- RBI-authorized Payment Service Provider
- PCI DSS Level 1 compliant
- ISO 27001 certified for information security
- Trusted by over 10 million businesses in India
2. SSL/TLS Encryption
All data transmitted between your browser and our server is encrypted using:
- SSL/TLS Protocol: 256-bit encryption (highest
standard)
- Certificate: Valid SSL certificate from trusted
certification authority
- HTTPS: All payment pages use secure HTTPS connection
Look for the padlock icon in your browser's address bar to confirm you're on a secure
page.
3. PCI DSS Compliance
Payment Card Industry Data Security Standard (PCI DSS) is the global standard for
payment card protection. We comply with:
- Annual security assessments and audits
- Firewall configuration and maintenance
- Encryption of payment data in transit and at rest
- Access control with unique user IDs
- Regular monitoring and testing of security systems
4. Card Data Protection
Important: We do NOT store your credit/debit card information on our
servers.
- Card details are processed directly through Razorpay's secure servers
- We only store a unique transaction reference number
- Your complete card number is never stored in our database
- Card tokens can be used for future payments only with your consent
5. Payment Methods Offered
We offer multiple secure payment options through Razorpay:
- Credit Cards: Visa, Mastercard, American Express
- Debit Cards: All major Indian banks
- Digital Wallets: Google Pay, PhonePe, PayTM, Amazon
Pay
- UPI: Google Pay, BHIM, PhonePe, etc.
- Netbanking: All major Indian banks
- EMI Options: No-cost EMI available for eligible cards
- Cash on Delivery: Pay when you receive your order
6. Fraud Detection & Prevention
Razorpay uses advanced fraud detection mechanisms:
- Real-time transaction monitoring
- Machine learning algorithms to detect suspicious patterns
- 3D Secure verification for added security
- Address Verification System (AVS)
- CVV verification for all card transactions
- Automatic flagging of high-risk transactions
7. Secure Checkout Process
Our checkout process ensures maximum security:
- Session Management: Secure session timeout after
inactivity
- CSRF Protection: CSRF tokens prevent unauthorized
transactions
- Input Validation: All user inputs are validated and
sanitized
- Rate Limiting: Protection against brute force attacks
- Secure Redirects: Only to verified payment gateway
8. 3D Secure Authentication
For additional security, some card transactions may require 3D Secure (Verified by
Visa/Mastercard SecureCode):
- Extra authentication layer for credit/debit cards
- You'll receive an OTP on your registered mobile number
- Enter OTP to confirm the payment
- Protects you against unauthorized use of your card
9. Transaction Security
Each transaction is protected by:
- Unique transaction ID (reference number)
- Order confirmation email with transaction details
- Real-time payment status updates
- Secured database storage of transaction records
- Encrypted transmission of all data
10. Chargeback & Dispute Resolution
If you encounter any issues with your payment:
- Accidental Duplicate Charge: Contact us immediately;
refund processed within 24 hours
- Unauthorized Transaction: Your bank will investigate;
we'll cooperate fully
- Payment Failed but Charged: Contact us with
transaction ID; immediate refund
- Chargeback Process: Your bank will guide you; we'll
respond to all inquiries
You have full protection under bank chargeback policies and RBI regulations.
11. Security Best Practices for You
To keep your payment information secure:
- Never share your card details via email or phone
- Always check the HTTPS padlock before entering card details
- Don't save card details on shared or public computers
- Keep your OTP confidential; we'll never ask for it
- Use strong, unique passwords for your account
- Enable two-factor authentication if available
- Regularly check your account for unauthorized transactions
- Report any suspicious activity immediately
12. Data Protection & Compliance
We comply with all applicable data protection laws:
- Information Technology Act, 2000 (ITA)
- Reserve Bank of India (RBI) Regulations
- Payments and Settlement Systems Act, 2007
- PCI DSS (Payment Card Industry Data Security Standard)
- ISO 27001 Information Security Management
13. Regular Security Audits
We conduct regular security audits and penetration testing to identify and fix any
vulnerabilities. Our systems are continuously monitored for suspicious activity.
14. Payment Security Support
If you experience any payment issues, please contact us immediately with your order
number.
