Security Policy

The security of this website and your information is of great importance to Get Contact Lenses Online. This website has reasonable security measures in place to protect the loss, misuse and alteration of your information under our control, but we make no assurances about our ability to prevent any such loss, misuse or alteration, and we shall have no liability to you or any third party from any loss, misuse or alteration.

Although we do not warrant that your access to the https://www.eyesat.com.au/shop section of the website is completely secure, our online ordering system makes use of the Stripe online payment portal.

All card numbers are encrypted on disk with AES-256. Decryption keys are stored on separate machines. None of Stripe’s internal servers and daemons are able to obtain plaintext card numbers; instead, they can just request that cards be sent to a service provider on a static whitelist. Stripe’s infrastructure for storing, decrypting, and transmitting card numbers runs in separate hosting infrastructure, and doesn’t share any credentials with Stripe’s primary services (API, website, etc.).

Stripe forces HTTPS for all services using TLS (SSL), including our public website and the dashboard.

  • Stripe.js is served only over TLS
  • Stripe’s official libraries connect to Stripe’s servers over TLS and verify TLS certificates on each connection

We regularly audit the details of our implementation: the certificates we serve, the certificate authorities we use, and the ciphers we support. We use HSTS to ensure browsers interact with Stripe only over HTTPS. Stripe is also on the HSTS preloaded lists for both Google Chrome and Mozilla Firefox.

We may use your IP address to help diagnose problems with our server and to administer our Web site, but we do not link IP addresses to any information that is personally identifiable.

We provide links to other sites outside of Get Contact Lenses Online. Get Contact Lenses Online is not responsible for the content of those sites, neither does the provision of these links imply that Get Contact Lenses Online approves or endorses those sites.