Cardholder Data Security & Encryption Policy

1. Strict Zero-Storage of Cardholder Data (PCI-DSS Compliance)

Stone Fintech LTD does not store, host, or inspect full Primary Account Numbers (PAN), CVV/CVC verification codes, or PIN blocks on our servers or within client-side state. Payment processing is facilitated via direct iframe and tokenization APIs engineered by our merchant acquirers (including Airwallex and PayPal).

2. 256-Bit SSL/TLS Cryptographic Encryption

Every data packet transmitted across Stone Fintech LTD (canillo.site) is encrypted utilizing Transport Layer Security (TLS 1.3) with 256-bit symmetric encryption keys. This prevents interception, eavesdropping, or tampering of sensitive customer and checkout payloads.

3. 3D Secure 2.0 (3DS2) Authentication & Strong Customer Authentication (SCA)

In strict accordance with UK and European Revised Payment Services Directive (PSD2) standards, transactions processed by UK and European cardholders are authenticated through 3D Secure 2.0 protocols (Visa Secure, Mastercard Identity Check, and American Express SafeKey). This multi-factor authentication protects against unauthorized online card usage.

4. Transparent Billing Descriptors

Transactions completed through our store will appear on your monthly bank or credit card statement under the descriptor:

If you ever notice an unrecognized charge, please contact our billing support desk prior to initiating a bank dispute so we can resolve the inquiry immediately.

5. Contact Our Security Officer

For security compliance verifications or inquiries regarding our payment infrastructure, contact: