Is My Information Safe?

Your privacy and the security of your credit card information is of paramount concern to us here at New Zealand Herbals.

When you make an order with us the information that is transmitted between your computer and our servers is done through an SSL encrypted tunnel. This is the same technology that most banks use to provide a secure connection between you and their online banking service.

How Does SSL Protect My Information?

An SSL connection creates a secure connection between your computer and ours by doing the following:

• Your computer authenticates that it is in fact communicating with one of our servers. This is done by checking the credentials that our server shows against records held by a trusted authority.
• Once your computer has confirmed that it is in fact communicating with one of our servers then both your computer and our servers exchange encryption keys using public key infrastructure (also known as asymmetric encryption).

Without the correct encryption key the information that is transmitted between your computer and our servers cannot be determined. The only known attack against this type of encryption is known as the brute force attack. This attack attempts to guess the encryption key that has been used. Therefore, the longer the encryption key the safer the communication.

We allow a minimum of 128 bit and a maximum of 256 bit encryption keys. With a single 128 bit encryption key there are 2^128 possible combination. That works out to be 339,000,000,000,000,000,000,000,000,000,000,000 give or take a couple of trillion. Even with computers becoming 100 times more powerful than they are today it would still take thousands of years to try every possible combination of numbers.

Once the Information is Safely at Your Servers What Happens Then?

Once our servers have received your order we then encrypt the information again with a random key known only to us (we currently have 255 keys). Each key is 256 bits long which increases the security yet again. Access to your information is protected by this key, another password and a user name. Only a very limited number of staff members are given permission to access this information and without the correct key, password and user name your information cannot be accessed.

Once we have processed your order and charged your credit card we remove all your credit card details from our systems. This ensures your continued security.