Currency
Every price on this site is in euro (EUR) and includes 19% German value added tax. The currency is written out next to the amount rather than left as a symbol, so there is no ambiguity about which euro-area currency is meant. We do not display or charge in any other currency and we apply no conversion of our own.
If your card is denominated in another currency, your own bank converts at its rate and may add a foreign transaction fee. That is between you and your bank; we neither set nor receive it.
What you are charged
The total shown on the checkout page before you confirm is the total: goods including VAT, plus shipping. There are no handling fees, no surcharges for any card, and no recurring charges. This shop sells outright — there is no subscription, no membership, no stored balance and no loyalty scheme, so nothing can renew or auto-charge.
Your statement will show the name of the merchant of record for this shop. If a charge on your statement is unfamiliar, contact us before contacting your bank and we will identify it for you.
Card schemes accepted
Card details are entered on the payment provider’s own PCI-DSS compliant page. Available payment methods are shown at the payment step of checkout.
How your card data is handled
- Card numbers never reach this shop. They are entered on the payment provider’s hosted page, transmitted directly to them over TLS, and are not visible to, processed by, or stored on our servers at any point.
- We store no card data. Not the full number, not a truncated number, not the expiry date, not the security code. Our order records hold a payment reference and a status, nothing more.
- PCI DSS. Because card data is captured entirely on the provider’s hosted page, our scope is the minimum available to a merchant. The provider is PCI DSS Level 1 certified.
- Strong customer authentication. Card payments in the EU are subject to SCA under PSD2. Your bank may ask you to confirm the payment in its app or by a one-time code; that step happens between you and your bank.
Security of this site
- HTTPS everywhere. The whole site, not only the checkout, is served over TLS. HTTP requests are redirected and HSTS is set, so a browser that has visited once will refuse an unencrypted connection afterwards.
- Security headers. Content type sniffing is disabled, framing is restricted to same-origin, referrer information is trimmed on cross-origin navigation, and geolocation, camera and microphone access are denied outright.
- Rate limiting. Public form and order endpoints are rate limited per address to make automated abuse and card testing impractical.
- Server-side validation. Prices, product availability and engraving rules are re-checked on the server against our own catalogue. A tampered request cannot invent a price or an item.
- Data minimisation. We ask for a name, an email, a phone number and a delivery address. We do not ask for a date of birth, an identity document or any financial detail beyond what the payment step needs.
Invoices
An invoice showing the net amount, the VAT rate, the VAT amount and the gross total is sent by email when your order is dispatched. Business customers who need their VAT ID on the invoice should send it to support@haroldssswaren.shop with the order reference before dispatch.
Refunds
Refunds go back to the original payment method, never to a different card or account, and never as store credit in place of money. Timing and conditions are set out under returns and refunds and right of withdrawal.
If something looks wrong
Write to support@haroldssswaren.shop or call +49 1709855495 during Monday to Friday, 09:00–17:00 CET. A payment problem is faster to resolve with us directly than through a chargeback, and we would rather fix it than dispute it.