Payment Security

The card fields at checkout are not part of this website. They are served inside a separate secure frame by our payment provider, which means the number, expiry and security code you type are encrypted in your browser and sent straight to the provider — they never pass through this site's servers, never appear in our logs, and are never visible to anyone working here.

What comes back to us is a token plus the details we need to recognise the payment: the last four digits, the card brand, the issuing country, and whether it is a debit or credit card. There is no point at which a full card number exists anywhere in our systems, which is the only way to be certain it cannot be taken from them.

Every page on this site, not only checkout, is served over TLS with 256-bit encryption and a strict transport-security policy, so a browser will refuse to load any part of it unencrypted. The checkout page additionally restricts which sources may load scripts at all.

You can confirm this yourself: the padlock in the address bar covers the whole site, and the certificate names this domain.

Some orders are sent through 3-D Secure, the step where your bank asks you to confirm the payment in its own app or with a code. Whether it triggers is decided by your bank and by the amount, not by us, and we cannot skip it.

It is worth the extra step: a payment confirmed that way is authenticated by your bank, which protects you against someone else using your card here.

Every order is screened automatically — the billing address is checked against the card, the security code is verified, and the order is scored for the ordinary signals of a stolen card. We collect the billing address separately from the shipping address for exactly this reason: the billing address has to match the card's records, and using a shipping address there causes a false mismatch.

An order we cannot verify is cancelled and refunded in full, not held. We will email you if that happens and you are welcome to place it again — there is no penalty and no blacklist for a failed check.

Every charge and every refund from this store appears as MUSE AND OAK. It never varies — not by piece, not by campaign, not by which page you ordered from.

If you see anything else, it is not us. If MUSE AND OAK appears and you do not recognise it, email hello@museandoak.com with the amount and the date and we will identify it the same day.

We keep the order itself — what you bought, where it went, what it cost — for seven years, because tax and accounting rules require it. We keep the payment token, the last four digits and the card brand for the same period so a refund can be issued to the original card and so a disputed charge can be identified.

We do not store full card numbers or security codes at any point, and we cannot charge your card again without you completing a new checkout. There are no saved cards on this site and no subscriptions.