|
We are committed to protecting your privacy during your visit to our website and recognise our responsibility to hold your information securely and confidentially.
'UK Documents' act on your behalf for the purpose of searching and supplying any available public document pertaining to a deceased’s estate. Your personal information is not disclosed to any third party for any application or search conducted and we are committed to providing total confidentiality and anonymity for all searches and documents supplied
Online Security
This website takes every precaution to protect our users' information. When users submit sensitive information via the website, your information is protected both online and off-line.
When our order form asks users to enter sensitive information, that information is encrypted and is protected with the best encryption software in the industry - SSL. While on a secure page, such as our order form, the lock icon on the bottom of Web browsers such as Netscape Navigator and Microsoft Internet Explorer becomes locked, as opposed to un-locked, or open, when you are just 'surfing'.
Cookies
Cookies are small text files placed on your computer and are commonly used on the internet. We use non-persistent cookies on this web site for the sole purpose of your order information to be processed.
Please note that some parts of our website may not function properly if you reject cookies. Please refer to your internet browser’s help section for specific instructions.
Off-line Security
While we use SSL encryption to protect sensitive information online, we also do everything in our power to protect user-information off-line. All information, not just the sensitive information mentioned above, is restricted in our offices. Only employees who need the information to perform a specific job are granted access to personally identifiable information.
Any information that we collect about you is for the purpose of processing your order. This information will only be used lawfully in accordance with the Data Protection Act 1998. It will be held by us for no longer than is necessary for the purpose of processing and dispatching your order and/or to rectify any delay or loss before the document has been delivered. Your name, address and email address will not be kept or used for any marketing purposes by us and we will not pass on this information to anyone else. We will ensure that all information that you have supplied is safely and securely deleted or shredded once you order has been processed.
Online payment
We use 'SagePay' as our online payment facility provider. The 'SagePay' payment system uses a combination of established and innovative techniques to ensure the security and integrity of all sensitive data.
When an order is placed online via our website we are not supplied with your card information. We are therefore unable to make any additional or unauthorised payment transactions. However, we do have the facility to make refunds without being privileged to any card information.
Please read the following statement which is provided on the 'SagePay' website at: http://www.sagepay.com/security_policy.asp
Sage Pay collect card details via a 128-bit SSL secured payment page. We request card number, expiry dates, cardholder name and address and security code value. This information is then further encrypted to be held against the transaction details on our system before being sent to the UK acquiring banks for authorisation (over secure, offline channels). We don't store the security code (in line with Visa requirements) but we do store the card number (only in an encrypted format that none of our staff have access to).
Sage Pay secure your card details within our database using AES-256, the keys for which are held on tamper-proof hardware security modules which as stated are unavailable to Sage Pay staff.
When your details are supplied to us over SSLv3, the algorithm used is RC4, as it is for almost every major e-commerce site.
SSL generates the encryption keys it uses for RC4 by hashing (using both MD5 and SHA1), so that different sessions have unrelated keys. Also, SSL does not re-key RC4 for each packet, but uses the RC4 algorithm state from the end of one packet to begin encryption with the next packet.
The SSLv3 certificates we obtain from Verisign to secure our site can support AES-256 as the encryption algorithm, but the vast majority of customers use IE6 or below and older versions of Firefox and Netscape. Most also run on Microsoft Windows, which until Vista is released, cannot use AES in SSL encryption. At present, the vast majority of sessions will be encrypted at 128-bit, but with a strong algorithm like correctly implemented RC4, 128-bits is more than enough to ensure the security of your card details.
We can also assure you that your details would not have been gleaned from our system (which has been approved, and is regularly audited by Visa and Mastercard as one of the most secure sites in the UK).
Our systems are independently audited by the UK acquiring banks and we are compliant with the card schemes themselves (both Visa and Mastercard) under their Payment Card Industry Data Security Standard which ensures we meet very strict security guidelines (see http://www.visaeurope.com/aboutvisa/security/ais/main.jsp for more information).
We hope this explanation helps allay your security fears. Please do not hesitate to contact us if you have any further concerns. |