Bolasmiðjan uses the best possible security for our costumers. Payments from all major credit cards and via PayPal are accepted. In the last step of our checkout, customers with credit cards are transferred to Valitor or PayPal secure site, depending on their choice. Valitor is an Icelandic credit card company that handles all our credit card authorization and transactions. Valitor has been verified as PCI DSS compliant
In terms of data protection, Valitor has taken steps well beyond the minimum requirements for certification. We work tirelessly to provide the highest possible level of information security and protection against any kind of threat.
"We guarantee that any information registered in our information systems is accessible, should the need arise, to those who need and are permitted to retrieve it. As a frame of reference, our security policy is based on the Personal Information Protection Act and Regulations, an EU edict on personal information protection, along with other related security standards. Valitor’s policy complies fully with the rules of the Data Protection Authority on the security of personal information and with instructions issued by the Financial Supervisory Authority in Iceland concerning the operation of information systems subject to mandatory supervision."
Under no circumstances can Bolasmiðjan see or store customer’s credit card information. By transferring customers to Valitor's secure site, all credit card information is handled within Valitor and their secure system. Bolasmiðjan only receives confirmation for payment along with customer’s name and order number from Valitor.