We use Sage Pay to collect/process transaction information. You can find the security policy at http://www.sagepay.co.uk/policies/security-policy