A small part of my business requires that we set up hosting for clients, but these are very computer illiterate clients, so I need it so that we completely do it for them. To do this I need their card info. the payment gateway is with the host however, so I cant really see paypal being used. and i dont want to have hundreds of invoices a month if I take care of all the payments, dealing with delayed payments and all that shit. I will just set them to get rebilled by teh host and that is off my hands if they don't pay
A few options I see
1. They can email us their card info, but I know email isn't secure. Is there any form of secure email I could use?
2. We can install SSL on the site so they go to a page with a form and submit it. But once we get it, we'd need to store it somewhere (temporarily, until we bill it. We won't be storing credit card numbers for any period of time). With this though I assume there is a lot of extra things I need to do in order to uphold the responsibility of storing someones credit card numbers, even if temporarily. Are mysql databases appropriate for this or are there more secure solutions. Maybe they can submit it through a secure form, then that form sends some sort of encrypted email to me.. that would be ideal.
3. Maybe setup some sort of secure chat where they can just type it in and I view it
4. Phone is always the last resort, but I'd like to make this as electronically automated as possible.
Any other ideas would be greatly appreciated. Once we get the card I sign them up for the hosting, setup all their nameservers, etc, then delete their card info.
Cheers
A few options I see
1. They can email us their card info, but I know email isn't secure. Is there any form of secure email I could use?
2. We can install SSL on the site so they go to a page with a form and submit it. But once we get it, we'd need to store it somewhere (temporarily, until we bill it. We won't be storing credit card numbers for any period of time). With this though I assume there is a lot of extra things I need to do in order to uphold the responsibility of storing someones credit card numbers, even if temporarily. Are mysql databases appropriate for this or are there more secure solutions. Maybe they can submit it through a secure form, then that form sends some sort of encrypted email to me.. that would be ideal.
3. Maybe setup some sort of secure chat where they can just type it in and I view it
4. Phone is always the last resort, but I'd like to make this as electronically automated as possible.
Any other ideas would be greatly appreciated. Once we get the card I sign them up for the hosting, setup all their nameservers, etc, then delete their card info.
Cheers