Why You Should Never Email Credit Card Info to Any Vendor

At ECL Computing, your security is the foundation of everything we do. In an age where we can order a pizza with an emoji and wire money with a tap, it’s easy to get comfortable with digital convenience. We use email for everything: sending contracts, sharing photos, and chatting with colleagues.

However, when it comes to paying your invoice your first instinct might be to just "hit reply" with your card number. Stop right there. While email feels private, sending your credit card details through a standard message is the digital equivalent of writing your PIN on a postcard and dropping it in a public mailbox. Here is why ECL Computing insists that you never send financial data via email, and the strict rules we follow to keep you safe.

1. The "Postcard" Problem: Email is Not Encrypted

Standard email was never designed for high-security data. When you send an email, it often travels through several different servers before reaching its destination. At any point in that journey, if a server is compromised or a network is "sniffed" by hackers, your plain-text credit card number is visible to anyone watching.

2. The "Sent" Folder: A Permanent Target

Even if your email reaches us safely, a copy of that message stays in your Sent folder indefinitely. If your email account is ever hacked, one of the first things a thief will do is search your history for terms like "Visa" or "Mastercard." By emailing your card, you are effectively leaving a key to your bank account under the doormat of your inbox.

3. ECL Computing is PCI Compliant

ECL Computing maintains strict PCI-DSS (Payment Card Industry Data Security Standard) compliance. This is a rigorous global security standard that ensures we handle credit card information using the highest levels of encryption and physical security.

Because we take these governing rules seriously, we have a Zero-Retention Policy for unsecured data:

• Mandatory Deletion: If a client accidentally sends an email containing credit card numbers, CVVs, or expiry dates, our team is under strict governing rules to immediately and permanently delete that email.
• Non-Processing: For your safety, we will not process any payment requested through an email message. We will instead reach out to guide you toward a secure method.

Better, Faster, Safer Alternatives

We want your experience with ECL Computing to be seamless, but we refuse to compromise on your safety. Here is how you should handle payments instead:

A. Use Our Secure Client Portal

A link to our secure portal is included with every single invoice we send you, ensuring you always have easy access to your account. Our clients have a wide range of options to pay that include every major credit card and debit card. For those looking for the most cost-effective solution, we also support EFT and Debit Cards for free. Using the portal saves a significant amount of money and time compared to sending paper cheques, and the system is fully compatible with modern accounting programs for effortless reconciliation. Behind the scenes, the portal uses End-to-End Encryption (E2EE), meaning your data is scrambled the moment you type it and is only unscrambled by our secure bank processor.

B. Secure Payment Links

Our official digital invoices come with a unique, one-time payment link. These links lead to a hardened payment gateway built specifically to handle sensitive data.

C. The "Last Resort": Over the Phone or by Mail

While our digital options are faster and more secure, we understand that sometimes you may prefer a traditional approach as a final option. If you aren't comfortable with digital portals, you can give us a call or send payment by mail. Voice communication isn't indexed by search engines and doesn't leave a digital trail in your inbox, but please keep in mind that these methods require manual processing time.

How ECL Computing Helps Your Small Business Master PCI Compliance

As a small business owner, we know you wear many hats. Navigating the world of payment security shouldn't be another burden. Beyond protecting your interactions with us, we are dedicated to helping our clients improve their own security posture and bottom line.

If your business handles customer payments, we can help you grow securely:

• Your Partner in PCI Compliance: We help your organization navigate the complexities of PCI-DSS compliance, giving your customers the confidence that their data is handled with the same professional rigor we apply at ECL.
• Lower Transaction Fees: Through our industry partnerships and optimized payment routing, we help small businesses implement systems that accept credit cards at a significantly lower fee than standard off-the-shelf solutions.
• Seamless Software Integration: ECL Computing specializes in payment systems that integrate directly with major accounting software. We support receiving payments through Accpac, Adagio, QuickBooks, Sage 50, Sage 300, and Manager.io, streamlining your workflows and virtually eliminating manual data entry errors.

Protecting your business and your customers shouldn't come at a premium. Contact our solutions team today to learn how we can help you secure your payments while reducing your overhead.

The Golden Rule of Digital Safety

If any company asks you to send your full credit card number via email, do not do it. At ECL Computing, we will never ask for this information over email. Our security protocols are in place to ensure your data stays where it belongs: safe, encrypted, and out of the wrong hands.

Have questions about our security practices or our business solutions? Reach out to our team at [email protected].