Secure website access

Menasriamorchid.com is delivered over an encrypted HTTPS connection.

HTTPS encrypts information in transit between your browser and this website. It does not make every internet risk disappear, so please do not send sensitive information through email, text messages, or other channels that were not designed to receive it.

Payment information

Listed arrangements are paid on a Stripe Payment Link. Card numbers stay off this website.

Pay listed price opens a Stripe Payment Link for the published USD amount of that arrangement or package. Card details are entered on Stripe's page rather than menasriamorchid.com.

Custom design work is still quoted first. After you approve the written figure, we send a Stripe page for that exact amount. There is no reusable public Payment Link for custom work.

Visa, Mastercard, American Express, and Discover are the networks shown for a U.S. Payment Link in USD. Stripe determines which eligible methods appear for each customer and transaction.

This website does not treat the success page as payment proof. Fulfillment follows a signed Stripe webhook or an authenticated status check.

How a charge will appear

Look for MENASRIAM ORCHID. Some banks print MENASRIAM* plus a short product label.

The long statement descriptor is MENASRIAM ORCHID. The shortened descriptor, or card prefix, is MENASRIAM* [PRODUCT]. The text after the asterisk names the arrangement or order and can change from charge to charge.

Your bank can print that line with different spacing, capitals, or dropped punctuation. That reformatting is done by the issuer, not by this website.

PCI DSS payment-boundary readiness

The payment boundary keeps card-entry fields on Stripe's Payment Link page.

This architecture does not place raw card fields, Stripe Elements, or an embedded payment form on menasriamorchid.com. Payment-page elements come from an official Stripe Payment Link after the customer leaves this website.

Complete card numbers and card security codes must not be submitted through website forms, URLs, email, text messages, logs, order metadata, or business records. The contact endpoint rejects messages containing a potential payment-card number before saving or emailing the request.

Fulfillment follows a signed Stripe webhook. The success page is informational only. Applicable PCI validation duties remain a shared operational responsibility.

This readiness statement is not PCI certification, an attestation of compliance, or a claim that Stripe endorses this studio.

Data minimization

We ask for the information needed to provide quotes, orders, delivery, and support.

We aim to collect only the personal information needed to respond to requests, prepare arrangements, coordinate fulfillment, provide support, maintain records, prevent fraud, and satisfy legal obligations.

Access controls

Business records are limited to people and providers who need them.

We limit order and customer information to the people and service providers who need it for customer support, fulfillment, security, accounting, or legal requirements.

Fraud prevention and disputes

We may review orders for unusual or risky activity.

We may verify order details, contact information, payment status, delivery information, and suspicious activity to help prevent fraud, unauthorized transactions, charge disputes, and misuse of the website.

Incident response

If a security issue occurs, we will act to contain it and notify affected parties where required.

If we become aware of a security incident affecting personal information, we will investigate, preserve relevant facts, take reasonable containment steps, and work with relevant service providers. Where GDPR applies and a personal-data breach is likely to create a risk to individuals, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours after becoming aware of it. We will notify affected individuals when applicable law requires it.

Customer responsibilities

Customers should use accurate details and avoid sending sensitive card data through email or messages.

Please provide accurate order details and do not send complete card numbers or card security codes by email, text message, URLs, or contact forms. Use only the official Stripe Payment Link from a listed arrangement or the Stripe page we send after a custom quote is approved.

Contact

Report security or trust concerns promptly.

Security, privacy, or suspicious-order concerns can be sent to contact@menasriamorchid.com or reported by phone at +1 (571) 583-5393.