Payment Methods and Security

Only payment methods shown for the specific Order are available. Online card payment is processed through Inecobank when enabled. Manual confirmation, bank transfer, cash, payment on delivery or another processor applies only when explicitly displayed with instructions; the absence of a method means it is not offered.

For an online card payment, Kaleske creates a durable order and then redirects the customer to the bank-hosted page. Card number, expiry date and CVV or CVC are entered there, must never pass through GraphQL and are not stored in Kaleske logs or databases. The bank or issuer may require authentication and may decline the transaction.

The exact order amount and currency are shown before redirect and sent in the bank’s required minor units and currency code. The issuing bank may apply conversion or other charges. Authorization or a browser success message is provisional and does not by itself change the order to paid.

After return, the server queries the bank and verifies the provider transaction, order number, exact amount and currency. CREATED, PENDING and AUTHORIZED are not final settlement; only a verified SUCCEEDED state marks payment successful. FAILED, CANCELLED and EXPIRED do not fulfil an order. Payment and fulfilment have separate statuses.

Payment creation uses idempotency protection, but customers should not repeat a pending attempt. If two settled charges appear, contact [email protected] with the order number and bank references, never full card data. Confirmed duplicates are handled under the Refund and Cancellation Policy.

Return links are rate-limited and cannot confirm payment without a server-to-server check. Provider credentials remain server-side. For an unexpected status, keep the order number, avoid repeated payment and contact [email protected] or +37495165863. Kaleske does not claim PCI DSS certification without verified current certification.