Payment & Security Policy
Payment & Security Policy
The same precision we bring to every small-batch elixir, we bring to every transaction. Here is exactly how we accept payment, protect your card details, and keep checkout on shoplabache.com safe — wherever in the world you're ordering from.
Why This Policy Exists
This Payment & Security Policy explains, in plain language, exactly how La Bâché LC Bryant LLC ("La Bâché," "we," "us," or "our") accepts payment for orders placed on shoplabache.com, which technologies protect your payment details, and what happens behind the scenes between the moment you tap "Pay now" and the moment your Blueberry Luxé Élixir, Élixir Romarin, or Parfum D'Homme ships from Philadelphia.
We are a women-owned, family-led small-batch skincare, hair, and Homme grooming house registered at 6560 N Mascher Street, Philadelphia, Pennsylvania 19120, United States (EIN 93-1772862). Our storefront runs on Shopify's commerce platform, and we ship to customers across the United States, Japan, and the European Union, EEA, and United Kingdom — three regions with different consumer-payment expectations, which is why this policy is written to satisfy all three, on their own terms, rather than a single generic template.
This policy should be read together with our Privacy Policy, Terms of Service, Refund Policy, Shipping Policy, and Legal Notice. Nothing here overrides the specific terms of the card network, digital wallet, or payment processor you choose to pay with — those remain governed by that provider's own agreement with you.
Ways You Can Pay
Every payment method below is processed through Shopify's secure checkout — never through a form we host ourselves. You will see only the methods relevant to your device, region, and currency at checkout.
Wallets are simply a faster front door. Apple Pay, Google Pay, and Shop Pay do not create a new payment relationship with La Bâché — they securely pass a tokenized version of the card already saved in your device or Shop account to our payment processor. We never see the underlying card number in any of these flows.
Regional availability. Not every method is shown in every country; availability depends on your shipping destination, device, browser, and the card networks supported there. Where a method is unavailable, it will simply not appear as an option at checkout.
How We Process & Protect Payment Data
● We do not process, transmit, or store your full card number on our own servers, at any point. Every payment on shoplabache.com is handled entirely by Shopify Payments and, where selected, PayPal — both PCI-DSS Level 1 certified payment processors, the highest tier of certification issued under the Payment Card Industry Data Security Standard. La Bâché's checkout page is hosted on Shopify's PCI-compliant infrastructure, meaning your card data never passes through, or rests on, servers we control.
Concretely, this means:
- End-to-end encryption. Every page of our storefront and checkout, from the moment you add a product to your cart through final payment confirmation, is served over HTTPS using TLS (Transport Layer Security) 1.2 or higher — the same encryption standard used by major banks — so data traveling between your browser and our servers cannot be read in transit.
- Tokenization. Once you enter a card number, it is immediately converted into an encrypted, single-use token by our payment processor. La Bâché's systems only ever see this token, the last four digits of your card, and the transaction outcome — never the full card number, CVV, or magnetic-stripe data.
- PCI-DSS compliance. Shopify Payments maintains PCI-DSS Level 1 certification, the strictest level, covering the storage, processing, and transmission of cardholder data. As a Shopify merchant, La Bâché operates under Shopify's PCI-DSS compliant environment (Self-Assessment Questionnaire A) and does not maintain a separate cardholder data environment of its own.
- No local card retention. We do not save your full card number, expiry date, or CVV in any database, spreadsheet, email, or point-of-sale system belonging to La Bâché. If you save a card for a future purchase, that card is stored exclusively in Shopify's vault or with your chosen wallet provider (Apple Pay, Google Pay, PayPal), never by us directly.
- Restricted internal access. Order records visible to La Bâché staff show only the last four digits of the card used, the payment method, and the transaction status — sufficient to fulfil and support your order, nothing more.
SSL / TLS Encrypted
Every checkout session is secured with a valid SSL certificate and TLS 1.2+ encryption, indicated by the padlock in your browser's address bar.
PCI-DSS Level 1
Payments are processed by PCI-DSS Level 1 certified providers — the highest available standard for handling cardholder data.
Fraud Monitoring
Every order is automatically screened for risk signals before it is approved for fulfilment. See Section 6 for details.
How Checkout Works, Step by Step
From cart to confirmation, here is precisely what happens to a payment on shoplabache.com.
Add to Cart
You select from our Skin, Hair, or Homme collections. Cart contents are held in a secure Shopify session cookie — see our Privacy Policy for details.
Encrypted Checkout
You are moved to Shopify's checkout.shoplabache.com domain over TLS-encrypted HTTPS to enter shipping and payment details.
Authorization
Your card issuer or wallet provider authorizes the charge in real time; our fraud-screening tools evaluate the order simultaneously.
Confirmation
You receive an order confirmation email; your card is charged, and your order enters production and fulfilment from Philadelphia.
Currency, Conversion & Taxes
Prices on shoplabache.com are displayed in US Dollars (USD) by default, reflecting our home base in Philadelphia. Using the region selector, you may also view estimated prices in a range of local currencies — including Japanese Yen (JPY) and Euro (EUR) for our Japan and Europe customers — powered by Shopify Markets.
- Conversion rates. Displayed non-USD prices use a market exchange rate that is refreshed regularly but is not guaranteed to match the exact rate your card issuer applies at the moment of settlement.
- Who converts the charge. Depending on your card and region, the final currency conversion is completed either by our payment processor at checkout or by your own card issuer after the transaction settles — in either case, a small variance from the displayed estimate is possible and is outside La Bâché's control.
- Foreign transaction fees. Your bank or card issuer may apply its own foreign-transaction or currency-conversion fee. We do not charge this fee ourselves and cannot waive one applied by your bank.
- Taxes & duties. Applicable U.S. state sales tax, Japanese consumption tax, or EU/UK value-added tax (VAT) is calculated automatically at checkout based on your shipping address, and shown as a separate line item before you confirm payment. International orders may also be subject to customs duties collected on delivery — see our Shipping Policy for details.
- No hidden surcharges. La Bâché does not add a surcharge for using any specific card network or digital wallet listed in Section 2.
Order Verification & Fraud Prevention
Because La Bâché ships genuine, small-batch luxury goods internationally, we apply automated and manual safeguards to every order before it leaves Philadelphia, protecting both genuine customers and our business from payment fraud.
- Real-time risk analysis. Every transaction is scored by Shopify's built-in fraud-analysis tools and, where relevant, by our payment processor's own risk engine, checking signals such as address mismatches, unusual order velocity, and known fraud indicators.
- Address Verification Service (AVS) & CVV checks. For card payments, the billing address and card security code are verified against the details on file with the card issuer before an order is approved.
- 3D Secure / Strong Customer Authentication. Where required — most notably for cards issued in the European Union and United Kingdom under PSD2 — you may be asked to complete an additional identity-verification step (such as a one-time passcode or biometric confirmation) directly with your bank before payment completes.
- Manual review. Orders flagged as higher risk may be placed on hold for a short manual review by our team before fulfilment. We may contact you by email or phone to confirm order details in these cases.
- Right to decline or cancel. La Bâché reserves the right to refuse, cancel, or delay any order reasonably suspected of fraud, unauthorized card use, or a violation of our Terms of Service, and will refund any amount already captured for a cancelled order.
- If you suspect unauthorized use of your card on our store, please contact us immediately at bonjour@shoplabache.com or +1 (215) 429-3436 so we can investigate, and contact your card issuer to dispute the charge.
Billing, Subscriptions & Order Changes
One-time payments, by default. Every product in our Skin, Hair, and Homme collections — including the Blueberry Luxé Élixir Facial Serum, Élixir Romarin Rosemary Mint Hair Oil, and Parfum D'Homme Serum & Balm — is sold as a single, one-time purchase. Your card or wallet is charged once, at the time your order is placed, for the full amount shown at checkout.
If we introduce subscriptions. Should La Bâché offer a recurring "replenishment" subscription for any product in the future, that specific product page and checkout flow will clearly disclose the recurring charge amount, billing frequency, and cancellation method before you subscribe, and you will be able to cancel future charges at any time from your account or by contacting us — consistent with U.S. state auto-renewal laws, and with a prior, separate opt-in as required in the EU and UK. No such recurring billing is currently active on shoplabache.com.
Order edits & cancellations. Because orders begin preparation quickly, we can only modify or cancel an order (and reverse the corresponding charge or authorization) if you contact us at bonjour@shoplabache.com before it has shipped. Once an order ships, our standard Refund Policy governs returns and refunds.
Refund method. Approved refunds are always returned to the original payment method used for the purchase — we do not issue refunds to a different card, account, or as store credit unless you request store credit and we agree to it in writing. Refund timing to your statement depends on your card issuer or wallet provider, typically 5–10 business days after we process it.
Declined or failed payments. If your card is declined at checkout, no charge is made and your order is not placed; you're welcome to retry with the same or a different payment method. Authorization holds for orders that are later cancelled or fail fraud review are released by your bank according to its own timelines, typically within 5–7 business days.
Account & Password Security
Creating a shoplabache.com account is optional and lets you check out faster and view order history, but it is never required to place an order as a guest.
- Secure password requirements. Account passwords are created and stored through Shopify's customer-account system, which requires a minimum password length and hashes every password using industry-standard, one-way encryption — La Bâché never sees, stores, or has access to your plain-text password.
- Passwordless & passkey sign-in. Where offered, you may also sign in using a one-time email code or device passkey instead of a traditional password.
- Your responsibility. Please choose a unique password you don't reuse elsewhere, and keep your email account secure, since it is the recovery route to your La Bâché account.
- Suspicious activity. If you notice an order, saved address, or account change you don't recognize, contact us immediately at bonjour@shoplabache.com so we can help secure your account.
- Account deletion. You may request deletion of your account and associated personal data at any time in line with our Privacy Policy.
United States, Japan & Europe
La Bâché ships to customers across all three regions, so our payment practices are built to meet each region's consumer-payment and financial-disclosure standards on its own terms. Select a region below.
Card Networks, Reg E & State Consumer-Protection Law
Card payments processed on shoplabache.com follow the operating rules of the relevant card network (Visa, Mastercard, American Express, Discover, Diners Club, JCB, UnionPay) and the dispute and error-resolution rights your issuing bank owes you under the federal Truth in Lending Act (for credit cards) and Electronic Fund Transfer Act / Regulation E (for debit-card and bank-linked wallet transactions).
Several states also impose their own rules on how e-commerce merchants must present and process payment, which we follow across every U.S. order regardless of the shipping state:
Any future subscription offer to California residents would require clear pre-purchase disclosure and an easy cancellation method, per Cal. Bus. & Prof. Code §17600 et seq.
Prohibits deceptive checkout practices and requires reasonable safeguards for New Yorkers' payment-related personal data.
Governs our home-state obligations for honest pricing, billing accuracy, and payment disclosures as a Philadelphia-registered company.
Require accurate advertised pricing and prohibit charging a card for more than the amount clearly disclosed at checkout.
Where a state limits or bans card-surcharging, La Bâché does not add one; see Section 5 for our no-surcharge commitment.
To ask a question about a U.S. charge or exercise a payment-related right under your state's law, contact us at bonjour@shoplabache.com or +1 (215) 429-3436.
Act on Specified Commercial Transactions & Payment Services Act
Orders shipping to Japan are handled in line with Japan's Act on Specified Commercial Transactions (特定商取引法), which requires clear, advance disclosure of the total price (inclusive of consumption tax), accepted payment timing, and cancellation conditions before payment is taken — all of which are shown on the product and checkout pages before you confirm your order.
Card and wallet payments accepted for Japan-bound orders are additionally processed in a manner consistent with Japan's Payment Services Act (資金決済法) and Installment Sales Act (割賦販売法) as they apply to international card-network transactions, and any personal data collected during payment is handled under the Act on the Protection of Personal Information (APPI), as described in our Privacy Policy.
Consumption Tax Display
Prices shown to Japan-based customers reflect applicable Japanese consumption tax as a distinct, clearly itemized line before payment.
Timing of Charge
Your card is charged once your order is confirmed and accepted, not merely upon adding items to cart, consistent with Japanese commercial-transaction disclosure norms.
Cancellation Before Shipment
You may request cancellation of an unshipped order per Section 7; once shipped, our Refund Policy applies.
Cross-Border Processing
Because our payment processor is based outside Japan, your payment data may be processed in the United States, consistent with the cross-border safeguards described in our Privacy Policy.
PSD2, Strong Customer Authentication & Consumer Rights Directive
For orders shipping to the European Union, the wider EEA, or the United Kingdom, card payments are subject to the revised Payment Services Directive (PSD2) and, in the UK, the equivalent UK PSRs — which require Strong Customer Authentication (SCA) for most online card payments. In practice, this means your bank may ask you to confirm the payment through your banking app, a one-time passcode, or biometric verification (such as Face ID) before it is approved.
Under the EU Consumer Rights Directive (2011/83/EU) and equivalent UK consumer law, we display the total price, all mandatory charges, and accepted payment methods clearly before you're asked to pay, and you are never charged for a supplementary payment (such as an extra fee for using a particular card type) without your explicit, informed consent given before the order is placed.
Strong Customer Authentication
Eligible EU/UK card payments require an additional bank-side verification step under PSD2 before the charge completes.
No Hidden Payment Fees
We do not levy an undisclosed surcharge for card use, consistent with the EU Consumer Rights Directive's ban on default extra payments.
VAT-Inclusive Pricing
Prices shown to EU and UK customers include applicable value-added tax, itemized separately at checkout.
Payment Data & GDPR
Payment-related personal data is processed under the GDPR / UK GDPR lawful bases described in our Privacy Policy, using Standard Contractual Clauses for any transfer outside the EEA or UK.
Third-Party Payment Processors
La Bâché does not build or operate its own payment infrastructure. Every transaction is handled by one of the following independent, regulated processors, each governed by its own terms and privacy practices:
- Shopify Payments / Shopify, Inc. — powers our core checkout for Visa, Mastercard, American Express, Discover, Diners Club, JCB, UnionPay, ELO, Apple Pay, Google Pay, and Shop Pay. Reviewable at the Shopify Consumer Privacy Policy.
- PayPal, Inc. — processes payments made by customers who choose to pay via a PayPal account. Governed by PayPal's own user agreement and privacy policy, accepted directly with PayPal when you use that option.
- Card networks. Visa, Mastercard, American Express, Discover, Diners Club International, ELO, JCB, and UnionPay each apply their own network rules to authorization, settlement, and dispute handling for transactions on their cards.
Because these are independent companies, La Bâché is not responsible for their internal security practices, service interruptions, or policy changes, though we work only with processors that maintain current PCI-DSS certification. If a processor experiences a service disruption, checkout on shoplabache.com may be temporarily unavailable for the affected payment method until service is restored.
Changes to This Payment & Security Policy
As La Bâché grows, we may add or retire specific payment methods or processors, and payment-security and consumer-protection laws in the United States, Japan, and Europe continue to evolve. When we make a material change to how we accept or secure payment, we will update the "Last Updated" date at the top of this page and, where required by law, provide additional notice such as a checkout banner or email.
We encourage you to revisit this page periodically. Continued use of shoplabache.com after an update constitutes your acknowledgment of the revised policy, without affecting any right you already held for an order placed before the change.
Questions About a Payment
If a charge looks unfamiliar, a payment failed unexpectedly, or anything in this policy is unclear, our team replies personally — typically within one business day.
Reach us by phone or email, through live chat on the site, or by writing to our Philadelphia office. We're also glad to help wholesale partners and press with payment-related questions through the same channels.
This Payment & Security Policy forms part of, and should be read alongside, our Privacy Policy, Terms of Service, Refund Policy, Shipping Policy, and Legal Notice. © 2026 La Bâché LC Bryant LLC. All rights reserved.