The short version. Card details are never entered on, transmitted through, handled by, or stored on this website. Payment is completed on the payment provider’s own secure, PCI DSS compliant page. We receive a confirmation that payment succeeded and the last few digits of the card — nothing more.
How a payment is handled
- You enter your delivery details on this site. No payment information is requested or accepted at that stage — nothing is charged when you press Continue.
- You are taken to the payment step, which is hosted and operated by the regulated payment provider configured for this store.
- Your card details go directly to that provider over an encrypted connection. They do not pass through this website’s servers.
- The provider authorises the payment with your bank, applying Strong Customer Authentication where required — this is the step that may ask you to confirm in your banking app.
- We receive confirmation that the payment succeeded, the amount, and a masked reference such as the last four digits. We use that to match the payment to your order.
Encryption in transit
Every page on this site is served over HTTPS (TLS). HTTP requests are redirected to HTTPS, and the site sends HTTP Strict Transport Security so that browsers refuse to connect insecurely. Form submissions — checkout details, contact and enquiry forms — are encrypted in transit.
What we store, and what we never store
| Item | Stored by us? |
|---|---|
| Full card number (PAN) | Never. We never receive it. |
| Card expiry date | Never. |
| Security code (CVV/CVC) | Never. This may not lawfully be stored by anyone after authorisation. |
| Cardholder name and billing address | Held by the payment provider, not by us |
| Last four digits and card type | Yes — solely to match a payment to an order and to process refunds |
| Payment reference and amount | Yes — required for accounting and refunds |
| Your delivery details and order contents | Yes — see the privacy policy |
PCI DSS
The Payment Card Industry Data Security Standard governs how card data is handled. Because card data is captured entirely on the payment provider’s own compliant page and never touches this site, our exposure is the minimum available to a merchant. The provider maintains its own PCI DSS compliance for the card environment. We do not operate card storage, do not accept card details by email or telephone, and will never ask you for a card number in a message.
We will never ask you for card details by email or phone. If you receive a message that appears to come from us asking for a card number, a security code, or a payment to a different account, it is not from us. Forward it to support@aajewelleryuk.shop and delete it.
Currency, VAT and what you are charged
- All transactions are processed in pounds sterling (GBP).
- Displayed prices include UK VAT at the prevailing rate. Delivery is added at checkout and shown in full before you confirm.
- The amount charged is the total shown on the checkout summary. We add no surcharge for paying by card and no booking, handling or service fee.
- If your card is issued in another currency, your bank converts it at their rate and may add their own fee. That is between you and your bank — we only ever charge the GBP total shown.
- Deliveries outside the UK may attract import duty or local tax on arrival, payable by you. See delivery.
What appears on your statement
Payments appear on your statement under a descriptor identifying A & A JEWELLERY LIMITED or the trading name Lobe. If you see a charge you do not recognise, contact us first at support@aajewelleryuk.shop or +44 7210559084 with the date and amount — we can usually identify it immediately, which is faster than a formal dispute for everyone.
Refunds
Refunds are always returned to the original payment method. We do not issue store credit in place of a refund you are entitled to, and we do not charge a fee to process one. Timescales and the circumstances in which a refund is due are set out in the returns policy. Once we issue a refund it typically reaches your account within 5–10 working days depending on your bank.
Disputes and chargebacks
If something has gone wrong, contacting us is almost always quicker than a chargeback: we can refund directly. Nothing here removes your right to raise a dispute with your card issuer, and we will provide any evidence a dispute requires. If a payment on your card was genuinely not made by you, contact your bank immediately as well as telling us.
Fraud prevention
The payment provider carries out fraud screening on transactions as part of authorisation. We may occasionally ask you to confirm order details before despatch if something looks inconsistent — that is a check on the order, not an accusation, and we will always explain why we are asking.
Reporting a security concern
If you believe you have found a security problem with this site, email support@aajewelleryuk.shop with the detail. We will acknowledge within one working day. Please do not publish it before we have had a chance to fix it.