About Online Security
All of your information, not just the sensitive information like a credit card number, is restricted only to employees who need the information to perform a specific job, for example our donation officers. Our employees must use password-protected screensavers when they leave their desk. When they return, they must re-enter their password to re-gain access to memberships information. Furthermore, all Greenpeace employees who handle membership information are kept up-to-date on the latest security and privacy practices and reminded about the importance we place on privacy, and what they can do to ensure our supporters' information is protected.
Are online transactions secure?
ActiveGiving protects registrants' payment information at all times using several thorough security policies and safeguards. Strict security begins at the point of data transmission, where we use Secure Socket Layer (SSL) encryption certificates issued by industry leader VeriSign on all of our payment servers.
This SSL encryption scrambles all payment information between the registrants' computers and our servers, payment data is effectively locked away by storing payment data on separate servers that do not have direct access to the Internet, and protecting them from digital access using a firewall. Payment data is further secured by limiting access, in fact denying access, from the Web site. Our Web site does not read credit card data from the database, nor does it make that data available to event administrators using our data export utility. Thus, credit card data is never available on the Web site, never leaves the Active systems, and event administrators are protected from the risk they would incur if they had to store and protect that data themselves.