Transaction Security Policy

You enter your card details only on the secure payment page of our payment provider Flitt — never on bookulus.kids. We never see, receive or store your card number, expiry date or security code (CVV/CVC).

Flitt is a PCI DSS–validated payment processor. PCI DSS is the security standard the international card schemes set for handling card data.

bookulus.kids and the payment page are served only over HTTPS, so everything you send is encrypted in transit.

Our connection to the payment provider is authenticated with a cryptographic signature, and we accept a payment result only if its signature is valid.

Your bank may ask you to confirm a card payment with 3-D Secure (Visa Secure or Mastercard Identity Check) — for example with a one-time code or in your banking app. Apple Pay and Google Pay payments are confirmed on your device with Face ID, Touch ID, a fingerprint or a passcode.

Our payment provider screens payments for signs of fraud. We may cancel or refuse an order that looks suspicious, in which case it is refunded in full.

For each payment we keep the order details, the amount, the payment status and reference returned by Flitt, and the payer's name, phone and address. They are held in an access-controlled database, available only to the people who run Bookulus.

Before entering card details, check that the address bar shows a secure (https) Flitt payment page.

We will never ask for your card number, PIN or one-time codes by email, phone or message. Do not share them with anyone.

If you see a charge you do not recognise, contact your bank immediately and let us know at zuka.jayeli@gmail.com or +995 595 53 11 11.