Step 2 of 3 — delivery & payment
Card data is tokenised by the gateway; it never touches our servers.