Payment & Security Policy
Every Transaction on Carplaylux Is Encrypted, Verified, and Never Stored on Our Servers
This page explains, in plain terms, exactly how we protect your payment details, which payment methods we accept, how Strong Customer Authentication (SCA) works at our checkout, and how we prevent fraudulent transactions across every country we ship to.
Last Updated / Effective Date: August 24, 2026
Automotive Electronics Deserve the Same Level of Trust as the Checkout Itself
Carplaylux is the trading name of Batterijen.net (registration number 82259844, VAT NL003661115B65), a registered Netherlands business selling CarPlay and Android Auto systems, OEM and OEM-style lighting, and vehicle electronics across thirteen European countries. Orders of this kind are often higher in value than typical consumer purchases, and vehicle owners understandably want to know exactly how their card details, bank information, and personal data are protected before they check out.
This policy sets out, without vague language or generic disclaimers, exactly which payment methods we accept, how each transaction is encrypted and authenticated, which party processes your payment, and what happens if a payment or refund needs additional verification.
We Never See, Store, or Have Access to Your Full Card Number
Carplaylux does not process, transmit, or store complete payment card numbers on our own servers at any point in the checkout flow. Every transaction is handled directly between your browser, our payment processor, and your card issuer or bank, using encrypted, tokenised channels that meet the Payment Card Industry Data Security Standard (PCI DSS).
Because we ship to Belgium, the Czech Republic, France, Germany, Hungary, Italy, Croatia, the Netherlands, Austria, Portugal, Slovakia, and Slovenia, and Spain, every transaction we process is also subject to the EU's Revised Payment Services Directive (PSD2) and its Strong Customer Authentication requirements, which we explain in detail further down this page.
Every Way You Can Pay at Carplaylux
All payment methods below are presented at checkout automatically, based on your delivery country and device. We do not add any undisclosed surcharges for using a particular payment method.
Payment brand names and logos are the property of their respective owners (Visa Inc., Mastercard International, American Express, Maestro/Mastercard, UnionPay International, PayPal Inc., Klarna Bank AB, Currence iDEAL, Bancontact Payconiq Company, Apple Inc., Google LLC, and Shopify Inc.) and are displayed solely to indicate accepted methods. Availability of iDEAL, Bancontact, and Klarna may vary depending on your delivery country and order value.
How We Protect Your Payment Data, Step by Step
Every measure below runs automatically, on every order, regardless of order value or destination country.
256-bit Encrypted Connection
Every page on carplaylux.com, including checkout, is served over a 256-bit TLS-encrypted connection. Card numbers, expiry dates, and security codes are encrypted in your browser before they leave your device, so the information cannot be read in transit.
Handled by a Certified Processor
Card payments are processed through infrastructure that is independently audited and certified to PCI DSS Level 1, the highest tier of Payment Card Industry certification, covering the strictest annual on-site assessment requirements.
Your Card Number Is Never Stored by Us
Once a card is authorised, our payment processor replaces the sensitive card data with a non-reversible token. Carplaylux only ever sees this token, never the full card number, so there is nothing sensitive on our servers for a breach to expose.
Bank-Level Identity Verification
For customers in the EU/EEA, 3D Secure 2.0 applies Strong Customer Authentication under PSD2, verifying your identity directly with your card issuer or bank before a payment is authorised.
Why Your Bank May Ask You to Confirm the Payment
Under the EU's Revised Payment Services Directive (PSD2, Directive (EU) 2015/2366) and its accompanying Regulatory Technical Standards, most online card payments made by EU/EEA cardholders — typically transactions above roughly €30, and in some cases lower-value transactions depending on your bank's own risk rules — require Strong Customer Authentication. This is a legal requirement, not a Carplaylux checkout setting, and it applies to every online retailer accepting EU card payments.
Card Details Entered
You enter your card or wallet details at our encrypted checkout, hosted by our payment processor.
Issuer Is Notified
Your card issuer or bank is contacted in real time via the 3D Secure 2.0 protocol to confirm the transaction is genuinely yours.
You Authenticate
Your bank asks you to confirm the payment, usually through your banking app, a one-time SMS code, or biometric approval (fingerprint or Face ID).
Payment Is Authorised
Once your bank confirms your identity, the payment is authorised and your order is placed. If authentication fails or times out, the payment is declined and no funds are taken.
Occasionally, an extra authentication step will make checkout take a few seconds longer than usual. This is a European banking-security requirement designed to protect you against unauthorised use of your card, and it operates independently of Carplaylux — we cannot switch it off, and would not want to, since it is one of the strongest safeguards against card fraud available today.
Who Actually Handles Your Payment
Carplaylux does not run its own payment servers. Checkout is powered by our e-commerce platform, Shopify, using Shopify Payments as our primary gateway together with PayPal as an alternative method. Both are independently certified and neither shares your full card number with Carplaylux.
| Checkout Platform | Shopify (carplaylux.com is built and hosted on the Shopify platform) |
| Primary Card Gateway | Shopify Payments — processes Visa, Mastercard, American Express, Maestro, UnionPay, Apple Pay, Google Pay, and Shop Pay |
| Alternative Gateway | PayPal — processes PayPal balance and linked card/bank payments under its own PCI DSS Level 1 certification |
| Local Payment Methods | iDEAL and Bancontact (routed through Shopify Payments' certified local acquiring partners), and Klarna (processed directly by Klarna Bank AB under its own banking licence) |
| Security Certification | PCI DSS Level 1, the highest available certification level, covering annual independent security audits of the payment infrastructure |
| What We Receive | An encrypted payment token, the authorisation result, and the last four digits of your card for order reference — never the full card number, expiry date, or security code |
| Currency Handling | Charges are processed in the currency shown at checkout for your delivery country; any currency conversion is performed by your card issuer or payment provider, not by Carplaylux |
How We Screen Every Order Before It Ships
Because our products include higher-value automotive electronics tied to a specific vehicle, we run every order through several automated checks before it is confirmed. These checks protect both genuine customers and Carplaylux from card fraud.
- Address Verification (AVS)The billing address entered at checkout is automatically cross-checked against the address on file with the card issuer before the payment is authorised.
- CVV / Security Code VerificationThe three- or four-digit security code on the back (or front, for American Express) of your card is verified with your issuer as part of every transaction, confirming the physical card was present when the details were entered.
- Geographic & IP ChecksThe location associated with your card, billing address, and connecting device are compared for consistency. Significant mismatches — for example, a card issued outside the thirteen countries we ship to — may trigger a manual review before dispatch.
- Velocity ChecksOur processor monitors for unusual patterns, such as multiple rapid transactions on the same card, IP address, or device within a short window, which are automatically flagged, delayed, or declined pending review.
If your order is flagged by any of these checks, we may contact you by email to confirm details before your order is dispatched, in addition to the vehicle-verification step described in our About Us page. This is a standard precaution and does not affect your statutory consumer rights.
How Refunds Are Verified and Processed
Refunds to the Original Method Only
Approved refunds are always returned to the original card or payment method used for the purchase. We cannot, and will not, redirect a refund to a different card, bank account, or third party, which protects you from refund-redirection fraud.
Why We Verify Before Refunding
Once a returned item is received, our team confirms the item, condition, and order reference match your account before releasing a refund. This inspection step, described fully in our Return & Refund Policy, exists to prevent fraudulent or mismatched refund claims.
Chargeback Handling
If a chargeback is raised with your bank instead of contacting us directly, we respond with the transaction's AVS/CVV results, 3D Secure authentication record, shipping confirmation, and tracking evidence. We always encourage customers to contact us first at info@carplaylux.com, since most issues can be resolved faster directly than through a card-network dispute.
Refunds are processed within 7 business days of a return being received and inspected, consistent with our Return & Refund Policy. Bank and card-network processing times beyond that point are outside our control.
In Plain Language
Your payment card information is handled directly by Shopify Payments, PayPal, or the relevant local payment method provider (iDEAL, Bancontact, or Klarna), each certified to PCI DSS Level 1. Carplaylux does not store, and does not have access to, your complete credit or debit card number, expiry date, or security code at any point. Our systems only ever receive a secure, encrypted payment token and an authorisation status, which is why a breach of our store would not expose usable card data.
Your Payment Protections, Market by Market
All thirteen countries we ship to are EU/EEA member states, so every transaction is governed by the same EU-wide baseline: the Revised Payment Services Directive (PSD2, Directive (EU) 2015/2366) for Strong Customer Authentication, and the General Data Protection Regulation (EU) 2016/679 for how your payment-related personal data is handled. Each country also enforces this baseline through its own national central bank or financial supervisory authority, listed below alongside any locally relevant notes.
Belgium
Czech Republic
France
Germany
Hungary
Italy
Croatia
Netherlands
Austria
Portugal
Slovakia
Slovenia
Spain
This overview is provided for transparency and general guidance. It is not a substitute for independent legal or financial advice, and we recommend consulting a qualified professional for questions specific to your jurisdiction.
What Happens to Your Data After Checkout
Under the General Data Protection Regulation (EU) 2016/679, payment-related personal data (such as your name, billing address, and transaction token) is processed only for the purposes of completing your order, preventing fraud, and meeting our accounting and tax obligations. This data is shared only with our payment processor, our fulfilment carriers (DHL and UPS), and, where legally required, tax authorities — never sold to third parties for marketing purposes.
Full detail on how personal data is collected, used, retained, and how you can exercise your GDPR rights (access, correction, deletion, and objection) is set out in our Privacy Policy.
Have a Question About Checkout, Billing, or a Charge?
Contact our support team directly, Monday to Friday, 09:00–17:00 CET. We aim to respond within 1 business day.
Last Updated / Effective Date: August 24, 2026 · Carplaylux is operated by Batterijen.net, registration number 82259844, VAT NL003661115B65, Oosterdiep 19, 3313 TE Dordrecht, The Netherlands.