When purchasing from The Tool Harbor, card details are processed securely through our payment provider. Card details are not stored on The Tool Harbor servers after payment processing.
Encryption in transit
All traffic to and from our website is encrypted using TLS 1.2+ (HTTPS). You'll see the padlock icon in your browser address bar.
PCI-DSS compliance
Card data is captured and processed directly by our PCI-DSS Level 1 compliant payment provider. Your full card number never touches our infrastructure.
Account security
- Passwords are stored hashed and salted — never in plain text.
- We recommend using a unique, strong password and enabling two-factor authentication where available.
- We will never ask you for your password, full card number or CVV by phone or email.
Fraud monitoring
Our payment provider applies real-time risk scoring to every transaction. Suspicious orders may be held or cancelled for verification.
Reporting a security issue
If you believe you have found a security vulnerability, please email hello@toolharbor.com.au with details. We'll acknowledge within 2 business days.