Website & Payment Security Policy

Effective date 10 November 2026

 

1. Security responsibilities

TAPE takes reasonable measures to protect its website, customer information and payment interactions. This policy should be read with the Privacy and Cookies Policy. TAPE applies technical and organisational controls appropriate to the risks and services used; no guarantee of complete protection against every incident is made.

Third-party hosting and payment providers support the online store. Their involvement does not remove TAPE's own duties, including using a payment system sufficiently secure for the transaction under ECTA section 43(5).

 

2. Payment processing

The available payment options appear at checkout. Depending on the method, payment details may be entered into a provider-hosted page, a redirect or an embedded payment form. TAPE receives the transaction information needed to reconcile the order. You can review the applicable provider information and privacy terms before submitting payment details.

Do not email card numbers, PINs, passwords or one-time codes to TAPE. TAPE staff will not need your banking password or one-time authorisation code to process an ordinary order query or return. Contact your bank promptly if you suspect a compromised payment instrument.

 

3. Account protection and fraud checks

Use a strong, unique password, protect access to your email account and sign out on shared devices. Check the website address before entering information and avoid unexpected payment links. Report suspicious account changes, orders or communications to info@tape.co.za.

TAPE may carry out proportionate checks on unusual transactions and request relevant verification information through an appropriate secure channel. TAPE limits these checks to relevant information and will not use them to delay a lawful refund without justification.

 

4. Reporting and response

If you suspect fraud or an incident, contact info@tape.co.za or 012 322 2418 with the order reference and a brief description. Avoid including confidential credentials. TAPE will investigate, involve relevant providers and take appropriate containment and corrective action.

Where a personal-information security compromise triggers legal duties, TAPE will notify the Information Regulator and affected data subjects as required. A provider investigation does not suspend TAPE's statutory notification obligations.