Any time you provide us with payment information online you are doing so completely over HTTPS - your data is fully encrypted prior to transmission by an industry standard SSL connection. Furthermore, when providing us with payment information online you are interacting directly with ChargeBee via their "hosted payment pages" such that we at VCG are not collecting any card information but rather, all sensitive credit card information is being passed directly to ChargeBee. ChargeBee is PCI DSS Level 1 compliant (the Payment Card Industry Data Security Standard (PCI DSS) is a set of requirements designed to ensure that ALL companies that process, store or transmit credit card information maintain a secure environment).
ChargeBee does not store your card information. Your card information is stored in a PCI compliant external card vault provided by Spreedly (www.spreedly.com).
We, as VCG, do not have access to your card details. We can only access the IIN (Issuer Identification Number) and last 4 digits of the card number along with the expiry date and card type in order to facilitate the handling of customer support issues related to payments.