FAQ | Help | Security

Security and Privacy


Need Assistance?

Voice: (919) 684-2200
Fax: (919) 684-4400

Hours

Mon-Thur: 8:00am - 7:00pm
Fri: 8:00am - 5:00pm
Sun: 3:00pm - 7:00pm

Your privacy is important to Duke University. We want to tell you in detail about the Internet policies and practices we have adopted to protect your privacy so that you can feel confident about how we handle the personal information you entrust to us online. While we do not intend to make changes to our policies very often, it is always a good idea to double check when you visit our site to be sure that you have read and agree with our most current policy statement. Any change in our privacy policy will be prospective only. We will not make any changes that have retroactive effect unless legally required to do so.

To learn more about Information Technology Security at Duke? Visit
http://www.security.duke.edu.




Are credit card, electronic check, and DukeCard (Flex) transactions handled securely by Duke?

Yes, data transmitted between your Internet browser and the DukePay server is encrypted by the Secure Sockets Layer (SSL) Internet protocol. SSL is the industry standard security protocol, which makes interception of transaction and order information extremely difficult. DukePay currently uses 128-Bit SSL encryption to communicate with your browser software when you make a payment using DukePay. We also use SSL to transfer the payment data to our payment gateway vendor(s).

DukePay is powered by CyberSource Corporation ("CyberSource"), a leading provider of commerce processing services to thousands of online businesses. Privacy and data protection issues are of the utmost importance to CyberSource. Visit CyberSource's "Privacy Statement" which details the company's policies with respect to the handling of personally identifiable information submitted. Any questions regarding CyberSource and the relationship with Duke University should be directed to the specific Duke department handling your transaction, or you may submit an email via our Help link.

Customers may also check website security by clicking on the lock image at the top or bottom of their web browser. When you are shopping online at a site using encryption, a closed lock is displayed indicating increased security.

Does DukePay collect or store personal information related to a transaction?

Your personal credit card, checking account, or DukeCard numbers are collected on the DukePay payment entry forms, then forwarded to our payment processing center. The DukePay system stores only the details related to your transaction that are needed to reconcile back to our internal systems, such as the amount of your payment, the Duke account number for which a payment is made (if applicable), name, time, etc. We also log the results of payment requests (i.e. approved or declined). Your personal account numbers are never stored on Duke University's machines.

Duke's payment gateway vendor, CyberSource, does securely store all of your payment data on their remote machines. CyberSource Corporation ("CyberSource"), a leading provider of commerce processing services to thousands of online businesses. Privacy and data protection issues are of the utmost importance to CyberSource. Visit CyberSource's "Privacy Statement" which details the company's policies with respect to the handling of personally identifiable information submitted. Any questions regarding CyberSource and the relationship with Duke University should be directed to the specific DUke department handling your transaction, or you may submit an email via our Help link.

What do you do to safeguard personal information?

We have instituted safeguards to check that our internal procedures meet our high policy standards. We also use our best efforts to be sure that third parties who work with us agree to protect personal information that they must access in order to serve our site and our visitors.

Does DukePay use "cookies"?

"Cookie" technology is used in DukePay, however we do not use cookies to track your surfing behavior. Cookies are used to identify a user for the course of a session. To view your cookie setting see the following if using Netscape or Microsoft Internet Explorer.

For Microsoft® Internet Explorer 6.0:
To change your privacy settings:
In Internet Explorer, on the Tools menu, click Internet Options.
On the Privacy tab, move the slider up for a higher level of privacy or down for a lower level of privacy. When using DukePay, select the "Medium" privacy setting.

For Netscape 7.1: Enabling & Disabling Cookies:
You can specify how cookies should be handled by setting your Cookies preferences. The default setting is "Enable all cookies".
To change your Cookies preferences:
1. Open the Edit menu and choose Preferences.
2. Under the Privacy & Security category, click Cookies. (If no subcategories are visible, double-click Privacy & Security to expand the list.)
3. Set your Cookies preferences.

Do I need to have cookies enabled?

For Microsoft® Internet Explorer 6.0:
To change your privacy settings:
In Internet Explorer, on the Tools menu, click Internet Options.
On the Privacy tab, move the slider up for a higher level of privacy or down for a lower level of privacy. When using DukePay, select the "Medium" privacy setting.

For Netscape 7.1: Enabling & Disabling Cookies:
You can specify how cookies should be handled by setting your Cookies preferences. The default setting is "Enable all cookies".
To change your Cookies preferences:
1. Open the Edit menu and choose Preferences.
2. Under the Privacy & Security category, click Cookies. (If no subcategories are visible, double-click Privacy & Security to expand the list.)
3. Set your Cookies preferences.

Is making electronic payments over the Internet regulated for consumers?

Companies that process payments electronically (checks, credit cards, ATMs) must adhere to government-mandated guidelines. The electronic process is governed under Regulation E, which governs all electronic processing, including ATM and credit card transactions.

Legal disclosure:

We reserve the right to use or disclose any information as needed to satisfy any law, regulation or legal request, to protect the integrity of the site, to fulfill your requests, or to cooperate in any legal investigation.


FAQ | Help | Security