The Journey of Coffee to Europe 
The Forbidden Brew 
The Ottoman Secret Behind Turkish Delight At Effendy Sélection Exclusive, your security is our top priority. We implement industry-leading security measures to ensure that your shopping experience is not only enjoyable but also safe and secure. We partner with Stripe, a leading global payment processor, and utilize a secure API gateway to protect all transactions. This page outlines the comprehensive security measures we have in place to protect your personal information, payment details, and overall online shopping experience.
Table of Contents
1. Website Security
Our website employs multiple layers of security to protect your information and provide a safe shopping environment:
SSL Encryption
Our entire website is secured with SSL (Secure Sockets Layer) encryption technology, as indicated by the padlock icon in your browser’s address bar and the “https://” prefix in our URL. This creates an encrypted connection between your browser and our servers, ensuring that all data transmitted remains private and secure.
What this means for you: Any information you provide on our website—including personal details, login credentials, and payment information—is encrypted and protected from interception by unauthorized parties.
Regular Security Scans
We conduct regular security scans and vulnerability assessments to identify and address potential security issues before they can be exploited.
What this means for you: Our proactive approach to security helps ensure that our website remains secure against the latest threats and vulnerabilities.
Web Application Firewall
Our website is protected by a Web Application Firewall (WAF) that filters and monitors HTTP traffic between our web application and the Internet, protecting against common web exploits that could affect availability, compromise security, or consume excessive resources.
What this means for you: Additional protection against various cyber threats, including SQL injection, cross-site scripting (XSS), and other common attack vectors.
2. Data Protection
We take the protection of your personal data seriously and implement comprehensive measures to safeguard it:
GDPR Compliance
Our data handling practices comply with the General Data Protection Regulation (GDPR), giving you control over your personal information and ensuring transparency in how we collect, process, and store your data.
What this means for you: You have the right to access, correct, or delete your personal information, and we only collect data that is necessary for providing our services.
Data Minimization
We adhere to the principle of data minimization, collecting only the information necessary to process your orders and provide our services.
What this means for you: We don’t collect excessive personal information, reducing the risk of data exposure.
Secure Data Storage
All customer data is stored on secure servers with multiple layers of protection, including encryption, access controls, and regular security updates.
What this means for you: Your personal information is stored securely and protected against unauthorized access.
Privacy Policy: For detailed information on how we collect, use, and protect your personal information, please refer to our Privacy Policy.
3. Payment Security
Protecting your payment information is one of our highest priorities:
Stripe Payment Processing
We exclusively use Stripe as our payment provider. Stripe is a globally recognized, PCI-DSS Level 1 certified payment processor—the highest level of certification in the payments industry. All payment transactions are processed through Stripe’s secure infrastructure, not our own servers.
What this means for you: Your payment information is handled by one of the most secure and trusted payment platforms in the world, significantly reducing the risk of payment data breaches.
Secure API Gateway
Our payment system uses a dedicated API gateway that creates a secure channel between our website and Stripe’s payment processing infrastructure. This API gateway:
- Encrypts all payment data in transit
- Prevents direct access to payment systems
- Authenticates and authorizes all payment requests
- Monitors for suspicious activities in real-time
- Automatically updates to address new security vulnerabilities
What this means for you: An additional layer of security that ensures your payment information is transmitted securely from your browser directly to Stripe’s secure payment infrastructure.
PCI DSS Compliance
Our payment processing systems comply with the Payment Card Industry Data Security Standard (PCI DSS), a set of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment.
What this means for you: Your payment card information is handled according to the strictest industry security standards.
No Card Storage
We do not store your credit card information on our servers. All payment processing is handled by Stripe through our secure API gateway.
What this means for you: Your credit card details are never stored on our systems, significantly reducing the risk of exposure.
3D Secure Authentication
All credit card transactions are protected by 3D Secure (3DS) technology through Stripe’s secure API gateway, which adds an additional layer of authentication to verify that you are the legitimate cardholder.
What this means for you: Enhanced protection against unauthorized transactions and credit card fraud.
Payment Information: For more details about our payment security measures, please visit our Payment Information page.
4. Account Security
We implement several measures to ensure the security of your account:
Secure Password Requirements
Our system enforces strong password requirements to help protect your account from unauthorized access.
What this means for you: Your account is better protected against brute force attacks and password guessing.
Secure Authentication
We use secure authentication protocols to verify your identity when you log in to your account.
What this means for you: Additional protection against unauthorized access to your account.
Session Management
We implement secure session management practices, including automatic session timeouts and secure session cookies.
What this means for you: Reduced risk of session hijacking and unauthorized access to your account if you forget to log out.
5. Secure Shopping Tips
While we take extensive measures to protect your security on our website, there are additional steps you can take to enhance your online shopping security:
Use Strong, Unique Passwords
Create a strong, unique password for your Effendy account that includes a mix of uppercase and lowercase letters, numbers, and special characters. Avoid using the same password across multiple websites.
Tip: Consider using a reputable password manager to generate and store strong, unique passwords for all your online accounts.
Keep Your Devices Secure
Ensure your computer, smartphone, or tablet has up-to-date antivirus software, security patches, and operating system updates.
Tip: Enable automatic updates for your operating system and security software to ensure you’re always protected against the latest threats.
Be Cautious with Public Wi-Fi
Avoid making purchases or logging into your account when connected to public Wi-Fi networks, as these can be less secure and potentially monitored by malicious actors.
Tip: If you must shop online while away from home, consider using a virtual private network (VPN) to encrypt your connection.
Verify Email Communications
Be cautious of emails claiming to be from Effendy that request personal information or contain suspicious links. We will never ask for your password or full payment details via email.
Tip: Instead of clicking links in emails, type our website address directly into your browser or use a bookmark you’ve created.
Monitor Your Account
Regularly review your order history and account activity. Report any suspicious transactions or activities immediately.
Tip: Enable notifications for account activities to be alerted of any unauthorized actions.
Check for HTTPS
Always verify that you’re on our legitimate website by checking for “https://” at the beginning of the URL and the padlock icon in your browser’s address bar.
Tip: Look for visual cues like our official logo, design, and content to ensure you’re on the genuine Effendy website.
6. Security Certifications
Our commitment to security is backed by industry-recognized certifications and compliance with international standards:
- SSL Certificate: Our website uses an Extended Validation (EV) SSL certificate, providing the highest level of authentication and encryption available.
- PCI DSS Compliance: Our payment processing systems comply with the Payment Card Industry Data Security Standard.
- GDPR Compliance: Our data handling practices comply with the General Data Protection Regulation.
- Stripe Integration: We use Stripe’s certified secure payment infrastructure, which maintains its own extensive security certifications.
7. Fraud Prevention
We employ several measures to prevent fraudulent activities and protect both our customers and our business:
Transaction Monitoring
We use advanced fraud detection systems to monitor transactions for suspicious patterns or activities.
What this means for you: Additional protection against fraudulent transactions on your account.
Address Verification System (AVS)
Our payment system uses AVS to verify that the billing address provided matches the one on file with your card issuer.
What this means for you: Enhanced protection against unauthorized use of your payment cards.
Card Verification Value (CVV)
We require the CVV code for all credit card transactions, adding an extra layer of verification that the person making the purchase has physical possession of the card.
What this means for you: Additional security to prevent unauthorized use of your credit card information.
8. Security Updates
We continuously monitor the security landscape and update our systems to address new threats and vulnerabilities:
- Regular security patches and updates to all systems and software
- Ongoing security training for our staff
- Periodic security audits and penetration testing
- Continuous monitoring for suspicious activities
We stay informed about the latest security best practices and implement them to ensure the ongoing protection of your information.
9. Reporting Security Concerns
If you notice any suspicious activities related to your account or our website, or if you have security concerns or questions, please contact us immediately:
- Suspicious emails claiming to be from Effendy
- Unauthorized transactions or account activities
- Website functionality issues that may indicate a security problem
- Any other security concerns
You can report security concerns by emailing security@effendy.com or contacting our customer service team.
Responsible Disclosure: If you believe you’ve found a security vulnerability on our website, please report it to us privately at security@effendy.com. We appreciate your help in keeping our platform secure and will investigate all legitimate reports.
10. Contact Us
If you have any questions about our security measures or need assistance with security-related issues, please contact our customer service team:
Effendy – Selection Exclusive
A registered brand of Telesto Group B.V.
EUIPO 018734426 – WIPO WO0000001705806 – BOIP 1460547
Email: support@effendy.com
Security-specific inquiries: security@effendy.com
Phone: +31 10 200 4968
Hours: Monday to Friday, 9:00 AM to 5:00 PM CET
This Secure Shopping information was last updated on May 22, 2025, and supersedes all previous versions.
