Collection – Free

All items can be purchased available for collection from our shop in White Roding at no charge.

Standard Delivery – Free

All items held in stock in our shop including clothes, bags, accessories, and smaller items will be delivered using APC Overnight.

We will deliver to anywhere in the mainland United Kingdom. Any order placed before 12pm will usually be delivered the next working day (Tuesday-Friday).

All homeware items (and items available, but not held in stock in our shop) will be delivered direct to you and may take 3 – 5 days.

UK Standard Furniture Delivery – £24.99

All furniture items will be delivered direct to you and will be charged at £24.99. This is a 7 to 14 day service.

Larger furniture items, or items over a certain size/weight, currently require a 2 man delivery service. Once your order reaches your local depot, the courier company will call you to arrange a convenient time to deliver.

We use Stripe for our card processing which accepts and processes American Express, Visa, Discover, and Mastercard branded cards, as well as some of the more niche products like UnionPay, JCB, and Diners Club. 

Standard Delivery – Free

All items held in stock in our shop including clothes, bags, accessories, and smaller items will be delivered using APC Overnight.

We will deliver to anywhere in the mainland United Kingdom. Any order placed before 12pm will usually be delivered the next working day (Tuesday-Friday).

All homeware items (and items available, but not held in stock in our shop) will be delivered direct to you and may take 3 – 5 days.

UK Standard Furniture Delivery – £24.99

All furniture items will be delivered direct to you and will be charged at £24.99. This is a 7 to 14 day service.

Larger furniture items, or items over a certain size/weight, currently require a 2 man delivery service. Once your order reaches your local depot, the courier company will call you to arrange a convenient time to deliver.

Security is top of mind at My Flair Lady and also Stripe. In addition to offering their own security guide for integrations, Stripe uses strong encryption, fraud protection, and PCI compliance controls to help ensure that the answer to the question, “Is Stripe safe?” is a resounding yes.

Stripe encryption

Stripe encryption provides peace of mind for merchants and customers alike. It secures both payment information in transit and stored payment information. 

On the web, Stripe forces the HTTPS connection for all services using TLS (transport layer security), also known as SSL (secure sockets layer). That means anything sent to or from Stripe is encrypted, including the Stripe public website and the Dashboard.

When you’re using Stripe.js, you can only access it over TLS. Additionally, all of Stripe’s official libraries connect to Stripe’s servers over TLS and verify TLS certificates on each connection. That helps secure customer information, including sensitive payment data, while it’s in transit.

Encrypted stored data

Stripe’s infrastructure for storing, decrypting, and transmitting card numbers runs on separate machines from Stripe’s primary services, such as the API and website. 

Any stored card number is encrypted with AES-256 (Advanced Encryption Standard), which is the industry standard for security data. The keys to decrypt the card numbers are stored separately, and none of Stripe’s internal servers can access the plain-text card numbers. Servers can only request that cards be sent to an already whitelisted provider.

In addition, Stripe encryption extends to communications. Stripe uses two PGP keys to encrypt messaging and verify signed messages. When you securely contact Stripe, you use the general PGP key; when you send sensitive data like credit card information as part of a data import, you use the data migration PGP key.

Stripe encryption doesn’t stop there. They regularly audit their security measures, including the certificates they serve, the certificate authorities they use, and the ciphers they support. Stripe uses HSTS to make sure browsers are only accessing Stripe with HTTPS. Stripe is also on the HSTS preloaded lists for both Google Chrome and Mozilla Firefox.

Stripe fraud prevention

Radar is Stripe’s fraud protection mechanism. It uses machine learning to detect and block fraudulent transactions, and it’s built right into Stripe. Radar trains on data from millions of global companies, allowing its machine learning algorithms to become smarter and better at detecting new kinds of fraud. 

Radar is customized for modern internet transactions. The old ways of fraud protection were never meant for online transactions, but Radar was built specifically for them and helps prevent unnecessarily declined transactions and lost revenue.

Stripe fraud prevention also includes the use of 3D Secure, which is also known by its brand names (Visa Secure, Mastercard Identity Check, or American Express SafeKey). Stripe is supporting 3D Secure 2.0, which introduces “frictionless authentication” and provides a better purchasing experience than 3D Secure 1.0. 

3D Secure 2.0 is the main card authentication method used to meet the upcoming SCA (strong customer authentication) requirements for PSD2 in the EU and a key way for businesses to request exemptions to SCA. 3D Secure 2.0 was designed for smartphone use and requires less customer back and forth — but still provides a very secure way to authenticate purchases.

Stripe supports 3D Secure 2.0 on their new payment APIs, mobile SDKs, and on the new version of Checkout.

Stripe PCI compliance

PCI compliance is a complex, challenging standard. If you handle any kind of credit card data, you need to be able to prove that you comply with PCI DSS (data security standard). 

PCI DSS sets a baseline level of protection for consumers and helps reduce fraud and data breaches across the entire payment ecosystem. It’s applicable to any organization that accepts or processes payment cards.

PCI DSS compliance involves three main things:

• Making sure that sensitive credit card details are collected and transmitted securely
• Storing that data securely, which includes encryption, continuous monitoring, and testing the security of access to the card data
• Annually validating the security controls in place, which can require forms, questionnaires, external scanning services, and third-party audits

Stripe has been audited by a PCI-certified auditor and is certified PCI Service Provider Level 1, the highest level of certification that can be achieved in the payments industry.