debonda.com uses Stripe to process online payments under the highest global security standards. We operate an authorize-then-capture guarantee. When you submit a booking, your card is authorized for the amount, but no money is captured until our system automatically verifies that your requested slot is still available. If your requested slot is unavailable, the authorization is released and you are never charged. We never store your full credit card numbers, and we never ask for sensitive card data over the phone or via chat.
1. Our Payment Processor and PCI DSS Compliance
All online transactions on debonda.com are processed through Stripe, a globally recognized, Level 1 Payment Card Industry Data Security Standard (PCI DSS) certified payment processor. Stripe handles the cryptographic handling of your payment data, ensuring that your sensitive financial information is encrypted using advanced TLS protocols throughout the entire checkout sequence. Island Essence d.o.o. adheres to strict merchant compliance standards to protect your financial security.
2. The Authorize-Then-Capture Guest Guarantee
To protect you from paying for unconfirmed travel slots, our checkout system operates under an authorize-then-capture mechanism, which serves as our ultimate guest guarantee. When you enter your card details and submit an online reservation, Stripe places a temporary authorization hold on the transaction amount. Your funds are not captured or transferred to us at this stage. Our system then automatically verifies that your requested date and time slot are still available. Only when availability is confirmed are the authorized funds captured and your reservation confirmed. If another guest completed payment for the same slot first, the authorization is cancelled automatically and you are never charged. We release the authorization immediately on our side; your card issuer then removes the hold from your account, typically within 1 to 7 business days depending on the bank.
3. Strong Customer Authentication and 3D Secure
Our payment gateway fully enforces European Strong Customer Authentication (SCA) regulations and supports 3D Secure 2.0 verification protocols. During checkout, your card issuing bank may prompt you to complete a biometric fingerprint verification, mobile app confirmation, or SMS one-time password to validate your identity. This mandatory two-factor authentication step prevents unauthorized card use and provides maximum protection against online payment fraud.
4. No Card Storage on Our Servers
Island Essence d.o.o. never captures, processes, or stores your full credit card number, card expiration date, or CVV security code on our hosting servers. Your sensitive financial details are input directly into secure digital fields hosted by Stripe. Our reservations desk receives only cryptographic transaction metadata, including your payment confirmation timestamp, billing address, card issuer brand, and the last four digits of your card number for bookkeeping and receipt generation.
5. Official Payment Channels and Anti-Fraud Warning
We process payments strictly through our integrated website checkout form or via secure, individual Stripe payment links generated by our planning desk. For your absolute security, our staff will send payment links exclusively from our official corporate email domain (@debonda.com) or through our verified WhatsApp business number published on our Contact page.
Anti-Fraud Warning: We will never ask you to disclose your credit card number, CVV code, or banking password over the telephone, through SMS text messages, or via social media chat. If you receive a communication claiming to be from Debonda requesting direct wire transfers to an unrecognized bank account or asking for raw card details, do not reply. Report the incident immediately to our planning desk.
6. Currencies, Billing, and Receipts
All transactions are billed and processed in Euros (EUR). If your credit card or bank account is denominated in another currency, such as US Dollars or British Pounds, your card issuing bank will convert the transaction amount at their prevailing international exchange rate. Upon successful capture of your payment, our system automatically issues a digital receipt and booking confirmation to your registered email address. All issued receipts comply with Croatian tax regulations and include an itemized breakdown of services. Island Essence d.o.o. is not registered in the Croatian VAT system and VAT is not charged, in accordance with the Croatian Value Added Tax Act.
7. Refund Processing Mechanics
Whenever a refund is authorized under our Cancellation and Refund Policy, we execute the reimbursement directly through the Stripe merchant dashboard. Refunds can be credited only to the exact credit card or digital payment instrument originally used for the checkout transaction. We are technically prohibited from rerouting refunds to different cards or alternative bank accounts. For detailed information regarding refund eligibility windows and weather cancellation terms, please consult our Cancellation and Refund Policy.
8. Account and Portal Security for B2B Partners
Partner travel agencies and corporate clients accessing our B2B booking portal must maintain strict credential security. B2B account holders are strictly prohibited from sharing login usernames or passwords with unauthorized external parties. All partner portal transactions are logged with timestamps and IP addresses to prevent unauthorized booking modifications. If a partner suspects credential compromise, they must notify our administrative desk immediately so access can be reset and revoked.