Our security policy
We take very great care to ensure that any personal information you enter on the BT Shop website is kept safe. The following section explains how we keep your data secure.
When you type in your registration details or credit card number, our website automatically changes into secure mode. When you're submitting details to the BT Shop over the Internet, security is handled as follows:
- Firstly, when your browser (e.g. Internet Explorer) connects with the secure side of our server (website computer), that connection is between you and the server alone.
- Secondly, the information you're sending us will be encrypted before it begins its journey over the internet to BT.com. This ensures that it can't be read by anyone else while it's in transit. In other words, during the communications between your browser and our server, the information is scrambled. This is known as encryption and our encryption is 128bit. 128bit encryption uses billions (2 to power of 128) of possible combinations to scramble the information. The enabling technology is called Secure Sockets Layer, or SSL for short.
- Thirdly, any information we store internally so we can process your order, is kept on a computer system that operates independently of the web server and doesn't use an operating system that is prone to viruses, hacking etc.
In summary, we've taken the appropriate measures to ensure that your personal information is not unlawfully processed. BT Shop uses industry standard practices to safeguard the confidentiality of your personal identifiable information, including "firewalls" and Secure Socket Layers. BT Shop treats data as an asset that must be protected against loss and unauthorised access. However, no information transferred over the Internet or wireless network can be guaranteed to be completely secure.
Why do screen prompts tell me I'm being transferred to an insecure site?
It's BT Shop's policy to use a secure protocol whenever personal information, such as account or credit card details, are being displayed or entered. When moving from these secure pages to unprotected pages, your browser may warn you of the fact.
Why does a screen prompt tell me my security certificate is out of date?
A certificate is a piece of software that your browser uses to encrypt your personal information when it's being transmitted to and from the BT Shop. The message you're getting is probably erroneous. It's usually caused by older browser versions that don't process date information correctly. The solution is easy. Upgrade your browser to a newer version.
Why can't I see a padlock icon in Internet Explorer but can in Netscape Navigator?
Some older versions of Internet Explorer do not use the padlock icon to indicate whether an online page is using a secure protocol. To check whether a page is secure, look at the URL in the Address window. If it starts with the letters https instead of the usual http, it is secure. Alternatively, right click your mouse over the Address window and select Properties. If the page is secure, you'll see the words Transfer Protocol Privacy protected.
Netscape Navigator shows a locked padlock to indicate when a page is using a secure protocol. However, a few pages on the BT Shop or on BT.com still use frames that are effectively pages within pages. When this is the case, a secure frame within a page that doesn't contain secure information will still show an unlocked padlock. This doesn't mean that your personal information is insecure. To check, look in the Location window. If the page starts with the letters https instead of the usual http, it is secure. Alternatively, move your mouse over the frame you want to check, right click and select Open in New Window. That frame will now be in a new window and should show a closed padlock.
What are cookies and does BT use them?