Payments & security

Every price on this site is in USD — United States dollars — and every order is charged in USD. There is no currency switcher and no automatic conversion at our end.

We write the currency out beside each price rather than showing a bare symbol, because a dollar sign alone is ambiguous across a dozen currencies and an ambiguous price is the beginning of a dispute.

If your card is denominated in a different currency, your bank converts the amount at its own rate and may add a fee. Neither the rate nor the fee is set by us and neither is paid to us.

We accept Visa, Mastercard, American Express. The marks are shown at checkout and in the footer of every page so you know before you fill anything in.

Payment is a single charge for the order. Nothing on this site is sold on a recurring basis: there are no memberships, no subscriptions and no stored credentials used for future automatic charges.

Card number, expiry date and security code are entered in the payment processor's own environment. They do not pass through this site's servers and are not written to our database at any point.

The processor handling the transaction is certified to the Payment Card Industry Data Security Standard (PCI DSS). Our own responsibility under that standard is to keep card data out of our systems entirely, which is achieved by never receiving it.

What we hold is the outcome of the transaction and the details you typed into our own form: name, delivery address, contact details and what you ordered.

For cards issued in the European Economic Area and the United Kingdom, your bank may ask you to confirm the payment in its app or by a one-time code. That is strong customer authentication under European payments law.

It is a requirement placed on your bank and on us, and we cannot switch it off. If a payment fails at that step, it is almost always the bank's check rather than a problem with your card, and retrying from your banking app usually resolves it.

The whole site is served over HTTPS, including every form and the checkout. Certificates are renewed automatically and HTTP requests are redirected to HTTPS.

Forms are protected against automated submission. Order and customer records are accessible only to the people who need them, through individual accounts with two-factor authentication.

We do not embed third-party scripts on the checkout page beyond what the payment step itself requires.

At the point you complete the payment step, and not before. Adding to the bag charges nothing, and entering your details at checkout charges nothing.

The amount charged is the total shown on the checkout summary: the items, plus standard shipping unless the order is over USD 99, plus any tax applicable to the delivery destination.

Your order confirmation arrives by email and states the amount charged and the currency.

Refunds go back to the card that paid, in the currency the order was charged in, within fourteen days of us accepting a withdrawal or a claim under the guarantee.

If something has gone wrong, write to support@signeshats.live or call +34 1815617068 first. We answer within one working day and we would rather fix it directly than have you spend weeks in a chargeback process.

If you do raise a dispute with your bank, we will supply the order record, the delivery evidence and this policy. Nothing about doing so affects your statutory rights.

We may hold an order for manual review where the billing and delivery details do not correspond, or where an address has previously been associated with a fraudulent transaction. If that happens, we contact you before doing anything else.

If you see a charge from us you do not recognise, contact us immediately and we will trace it and, where it is not yours, refund it without argument.