We use Sage Pay to collect/process transaction information. Refer to  http://www.sagepay.co.uk/policies/security-policy for full details on Sagepay's security policy.