Secure Online Shopping
We have made securing your data a priority. RoughTrax use Sage Pay for all online payments, they use the Secure Socket Layer (SSL) for all orders placed – this prevents you from inadvertently revealing any personal information when purchasing from RoughTrax. SSL basically means that no one else can read your information while it is being transmitted over the Internet. We use this advanced encryption so that your card details & personal data cannot be seen.
A padlock will be visible in the bottom right of your web browser, this means you are in secure mode – this should always be visible when entering personal details or payment details.
- Secure Payments with SagePay
- Security Policy
- Verified by Visa & Mastercard ® SecureCode™
- Sage Pay Payment Gateway FAQ's
Secure payments with sagepay
Easy to use, flexible and secure online payments
SagePay are Europe’s leading independent payment service provider (PSP) and is one of the most trusted payment brands. SagePay are part of The Sage Group, a FTSE 1000 listed Global accounting Software Company.
Each year, SagePay process over 4 billion payments securely online, over the phone and through card machines. Over 50,000 businesses across Europe rely on SagePay to process card payments securely and help prevent fraudulent transactions. They make sure the payment process is safe and easy for you.
Sage Pay makes payments safe and secure
Payment security and fraud prevention are two of Sage Pay’s top priorities. Thousands of businesses already entrust them with their security because they keep our customer's data secure.
All of our transactions are encrypted to the highest global standards. Our payment systems are monitored and audited regularly by a world leading Qualified Security Assessors (QSA), so you can be confident our services are completely secure with Sage Pay.
(back to top)
Sage Pay is a payment service provider (PSP), thousands of businesses outsource their transaction security to us. It is our top priority to ensure that our customers’ transaction data is kept secure at all times.
All transaction information passed between merchant sites and Sage Pay’s systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to your servers from Sage Pay are signed using MD5 hashing to prevent tampering. You can be completely assured that nothing you pass to Sage Pay’s servers can be examined, used or modified by any third parties attempting to gain access to sensitive information.
Encryption and Data Storage
Once on our systems, all sensitive data is secured using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign's Global Root certificate, making them all but impossible to extract. The data we hold is extremely secure and we are regularly audited by the banks and banking authorities to ensure it remains so.
Sage Pay’s systems are scanned quarterly by Trustwave which are an independent Qualified Security Assessor (QSA) and an Approved Scanning Vendor (ASV) for the payment card brands.
Sage pay is also audited annually under the Payment Card Industry Data Security Standards (PCI DSS) and is a fully approved Level 1 payment services provider, which is the highest level of compliance. We are also active members of the PCI Security Standards Council (SSC) that defines card industry global regulation.
Links to banks
Sage Pay has multiple private links into the banking network that are completely separate from the Internet and which do not cross any publicly accessible networks. Any cardholder information sent to the banks and any authorisation message coming back is secure and cannot be tampered with.
Sage Pay is controlled by Iris Scanners, which are the latest and most precise biometric security devices available for identification. As used by; chemical plants, airports, police stations, prisons and other facilities where security is paramount. No one can enter or leave the building without a valid security pass.
Verified by Visa and Mastercard® SecureCode™
To give you even more confidence in shopping online with RoughTrax, we have introduced Verified by Visa and Mastercard® SecureCode™. These services enhance your existing card account against unauthorised use when you shop with us.
To use this service, you must first register with the bank or other organisation that issued your card. To find out more about these services:
Click here to visit the Verified by Visa website
Click here to visit the Mastercard® SecureCode™ website
Sagepay Payment Gateway FAQ's
Find below the most commonly asked questions from shoppers about online purchases. Instructions are also available to help you successfully resolve the most frequent issues. If you can't find what you're looking for, please let us know and we will do our upmost to help.
- Are my card details secure?
- 3D Secure security page
- My card is getting rejected
- I got an error message
- Was my payment successful?
- PayPal payment sent as an eCheque?
Are my card details secure?
Before entering your card details on payment page, there are a few things you can look for to ensure the page is secure. All Sage Pay payment pages are regularly audited by an independent auditor to make sure they comply with the latest security standards.
Is there a padlock?
A padlock image shows that your details are being collected securely using 128 bit SSL technology. Clicking on the padlock will show you the SSL certificate. Depending on what Internet web browser you're using, the padlock can be located in 3 different areas
- Bottom right hand corner
- Next to the address bar
- Top right hand corner
What else can you look for?
If you can't see the padlock on the payment page, make sure the URL starts with 'https' instead of 'http'. The extra 's shows you the page is secure.
3D Secure security page
The 3d Secure authentication is an additional fraud prevention scheme that is available to all companies using the Sage Pay systems to process transactions.
It allows shoppers to create and assign a password to their card that is then verified whenever a transaction is processed through a site that supports the use of the scheme. The addition of password protection allows extra security on transactions that are processed online.
3D Secure stands for 3 Domain Server, there are 3 parties that are involved in the 3D Secure process :
- The company the purchase is being made from.
- The Acquiring Bank
- VISA and MasterCard (the card issuers themselves)
As 3D Secure is controlled by VISA and MasterCard the following cards can be used : VISA, VISA DELTA, MASTERCARD, MASTERCARD DEBIT, INTERNATIONAL MAESTRO, UK MAESTRO, LASER, and VISA ELECTRON.
RoughTrax are not responsible for any of your 3D Secure details or passwords, any problem using this secure service please contact your bank directly or reset your 3D Secure password and try again.
If the 3D Secure password page is not loading correctly this could be because:
- 3D Secure is currently unavailable.
This could only be a temporary disruption to the scheme but if you are unable to complete your transaction contact the RoughTrax directly. If needed we will be able to arrange another for another payment method.
If you have entered your card details and you are stuck on the 3D Secure page then no funds will have been taken from your account.
My card is getting rejected
If you have tried to process transactions using a Sage Pay payment page but your card has been rejected then double-check:
- The card number length
- The issue number
- The card type
- The registered card address details
Sage Pay checks and validates the details of each card processed through Sage Pay to make sure the details are valid. They regularly update their system to make sure we have the latest Bank Identification Numbers (BIN) to support cards using our payment pages. This process will identify the card and reject any that are incorrectly formatted.
If your details are correct and your card is still getting rejected, please contact your bank directly.
I got an error message
If you get an error message after trying to process a payment through Sage Pay's checkout pages there is a range of reasons why this could happen.
Here's an overview of what could have happened:
- Issue with the card you are trying to use.
- Not enough information provided.
- Incorrect information provided.
- Time out. The connection between SagePay and the bank have a set time limit for security reasons, please try again.
- Cookies and website data stored on your web browser may need updating, try deleting cookies and website data and try again.
- Payment systems are experiencing technical difficulties.
In most cases please review the information provided, correct any errors and try again. If you are still experiencing the same error the best thing to do is to contact RoughTrax directly, we will be able to confirm if your order has gone through successfully or not and give you advice on how to proceed with next steps.
If an error code is given you can check the error code number on Sage Pays website to find out why an error happened and how to fix it.
Click Here to enter an error code.
Was my payment successful?
When a transaction is processed using Sage Pay's payment gateway, you will get either a 'success' or 'failure' page when your order is complete.
Depending how you have set up your RoughTrax account you may also receive a confirmation email from both SagePay & RoughTrax.
When in doubt, the best thing to do is to contact RoughTrax directly and inquire about the status of your order. You can also check the status of your order when you log in to your RoughTrax account.
RoughTrax monitor all payments made with the Sage Pay payment gateway daily. We can view any failed transactions and will contact you directly on the contact information you have given if a payment has failed. We will help guide you through the payment gateway and help rectify any errors that may occur.
PayPal Payment sent as an eCheque
A payment will be sent as an eCheque if your PayPal balance is not enough to cover the payment and you don’t have a card and a bank linked to your account.
With eCheques, your bank account will be debited when the payment is initiated. However, RoughTrax will typically receive the money 5-7 working days later.
RoughTrax will not dispatch any order until payment has been received in full. To check a status of an eCheque please log in to your PayPal account.