Every visitors works over SSL encryption, payment processing suits PCI-DSS conditions, plus the webpages uses a GDPR-aligned data plan