Website Security

Last updated: 17 August 2026

The measures that protect your data when you shop with us, and how to spot anything that is not us.

Encryption

Every page on OnCareful.co.uk, including the checkout, is served over HTTPS with TLS encryption. Information you send us — your address, contact details and payment step — is encrypted in transit.

Payment data

Card payments are handled by a PCI-DSS compliant payment provider. We do not store card numbers, CVV codes or bank credentials on our systems at any point. See Payment methods.

Our platform

Our shop runs on Shopify, a hosted commerce platform with its own security programme, and our checkout runs on infrastructure we control on the oncareful.co.uk domain. Access to customer data is limited to staff who need it to process orders and provide support.

Your account and order data

We keep order records for as long as we need them for accounting, warranty and legal purposes. What we collect and why is set out in our Privacy Policy, and the cookies involved are listed in our Cookie Policy.

How to spot a genuine message from us

Our emails come from an @oncareful.co.uk address.
We will never ask for your full card number, PIN, or online banking password by email, message or telephone.
We will never ask you to pay for an order by transferring money to a personal account.
Our only web addresses are oncareful.co.uk and checkout.oncareful.co.uk.

If you receive something that claims to be from us and does not match the above, do not click any links in it — forward it to support@oncareful.co.uk.

Reporting a security problem

If you believe you have found a security vulnerability affecting our site or a problem with your order data, please contact us at support@oncareful.co.uk with the details. We will investigate and respond.