SECURE SHOPPING

Last Updated January 2023

You can shop at www.clubtwentyafter.com with confidence.

CLUB TWENTY AFTER has partnered with Square to accept credit card payments safely and securely for our customers.

Square’s approach to security is designed to protect our customers. To protect Square customers, all information entered by our customers has been encrypted and submitted to our servers securely.

Square meets Level 1 PCI Data Security Standards. As per Square Terms, Security Policy and Privacy Policy, Club Twenty After will never sell information to third party vendors.

Fully encrypted: Square performs data encryption within the card reader at the moment of swipe.
Sensitive data is encrypted using industry-standard methods when stored on disk or transmitted over public networks.
Only standard, well-reviewed cryptographic protocols and message formats (such as SSL and PGP) are used when transferring data.
Symmetric cryptographic keys are required to be at least 128 bits long. Asymmetric keys must be at least 2048 bits long.
Security updates and patches are installed on servers and equipment in a timely fashion.
Security settings of applications and devices are tuned to ensure appropriate levels of protection.
Networks are strictly segregated according to security level. Modern, restrictive firewalls protect all connections between networks.
Card-processing systems adhere to PCI Data Security Standard (PCI-DSS), Level 1.

Card numbers, magnetic stripe data, and security codes are not stored on Square client devices.
Applications developed in-house are subject to strict quality testing and security review. Web development follows industry-standard secure coding guidelines, such as those recommended by OWASP.
Card-processing applications adhere to the PCI Data Security Standard (PCI-DSS), Level 1.
Fraud protection included.