Best Practice Security

Paying Gatsby is super easy and secure. You never leave our website, simply enter your details securely into a single page and click ‘Pay Now’.

Behind the scenes, all manner of best practice technology starts working. Our system is designed beyond just protecting your card, we even hold all payments (both by card and bank transfer) inside an escrow like travel bond until the day after your trip. This gives you an extra layer of financial protection against any any supplier failure. Safe. Easy. Best Practice.

SagePay Secure Card Transactions Logo
Comodo SSL Security Logo
Protected Trust Services Membership Seal

How we process your card

1. Financial transactions on gatsbytravel.com are securely processed on our site using SagePay technology, the UK’s leading credit card processing company regulated by the UK’s Financial Conduct Authority (FCA).

Your credit card details are instantly processed by our site. Your card details are never saved or retained by our website or merchant.

2. Our merchant, FirstData, then receives payment from your card company and deposits the funds into a trustees account managed by Protected Trust Services.

3. Your funds are held at Protected Trust Services (PTS)’s trustee managed bank account with HSBC. Only when your tour has completed does PTS release the funds to Gatsby Travel, ensuring your payment is protected from the unlikely event of a supplier failure, including the unlikely event of Gatsby going under.

Site Security

Our checkout is super-smart, ensuring your card isn’t stored anywhere by us. Only our card processor (SagePay, Stripe) deals with your data, so our staff can only see your card type and the last 4 digits of the card number, the rest of the data is never stored.

We also confirmed PCI DSS v.3 A-EP and have a certified security scans and penetration test by SysNet to ensure we are compliant. Our website is also scanned and monitored daily for signs of any security breach or malware. Our site uses a respected SSL certificate from Comodo, this EV SSL certificate requires our company to be fully verified.