Payment Security

The card fields at checkout are not part of this website. They are hosted inside an encrypted frame served by a PCI DSS Level 1 certified card vault, and your card number, expiry and security code go directly there from your browser.

The vault returns a token — a meaningless reference that cannot be reversed into a card number and is useless to anyone who intercepts it. That token is all our systems ever see. We do not receive, store, log or process your full card number at any point, including in error logs and analytics.

The only card data visible to us is the brand, the last four digits and the issuing country, which we use to display your order and to defend a dispute if one is ever raised.

Every page on this site, including the checkout, is served over TLS with 256-bit encryption and HSTS enabled. There is no unencrypted path to this site.

Our checkout is designed so that no page in the payment flow loads a third-party script that could observe your card entry.

Where your bank requires it, or where an order carries elevated risk, you will be asked to confirm the purchase with your bank — by app approval, biometrics or a one-time code. This is 3-D Secure, and completing it shifts liability for fraudulent use away from you.

This step is run by your bank. Sorex never sees your banking credentials, your app PIN or your one-time code.

Orders are screened before they are charged. We check the billing address against the address your card is registered to, verify the security code, and evaluate the order against fraud rules.

This is why we ask for your billing address separately from your shipping address. A mismatch there is the most common reason a perfectly good card gets declined — the address we need is the one your card statement goes to.

Your statement will show the descriptor displayed at checkout and on your order confirmation. It is deliberately printed in three places because an unrecognised line item on a statement is the single most common reason people dispute a charge they actually authorised.

If a charge from us looks wrong, email support@sorexskincare.com or call +1 (954) 806-8385. We can refund immediately.