Ordering & Trust
Is Checkout Secure & Does It Ship Discreetly?
Yes. Checkout is SSL-encrypted, payment runs through a PCI-compliant processor, and your card number is never stored on our servers. Orders ship in a plain corrugated box that doesn't describe the contents. Research and laboratory use only.
- SSL / HTTPS encrypted
- PCI-compliant payment
- No stored card data
- Plain shipping box
Direct Answer
Yes to both. You never type a card number into bacwaterdepot.com itself — checkout opens a secure, HTTPS payment page the instant you place your order, and orders ship in a plain corrugated box whose exterior does not describe the contents. That payment page sits on a separate HTTPS-only domain reached by a signed, server-to-server request, and every lot BAC Water Depot ships carries a per-lot Certificate of Analysis opened by the QR code on the vial.
What “secure and discreet” actually means here
| Concern | How it's handled |
|---|---|
| Connection security | SSL / HTTPS across the whole site, including checkout, with HSTS enforced so the connection never falls back to plain HTTP |
| Where the card number is typed | On the secure payment page, not on a form hosted at bacwaterdepot.com |
| Card data | Processed by a PCI-DSS-compliant processor; not stored on our servers |
| If the payment page doesn't load | A secure payment link is emailed instead — card details still aren't entered on the store |
| Non-card option | Zelle bank transfer, with payment details sent by email |
| Packaging | Plain corrugated shipping box; exterior does not describe the contents |
| The product itself | An ordinary sterile diluent sold openly by medical and lab suppliers |
What happens the moment you place a card order
Card checkout is not a form on bacwaterdepot.com that collects your number and forwards it along. The instant an order is placed, the checkout asks a separate payment service for that order's own hosted payment page and sends your browser straight there — card entry happens on that page, under PCI-DSS controls, not on this site.
The handoff happens server to server, and your browser is only ever sent to a page on the payment service's own HTTPS domain — never to an arbitrary address.
When that is the case — or for anyone who backs out before finishing — the order is not left stranded. A secure payment link is emailed instead, so the only two ways to pay by card are the on-the-spot hosted page or that emailed link. Neither route asks you to type a card number into a page on bacwaterdepot.com itself, and your card number is never written to our database or logs. Choosing Zelle instead skips the card step entirely: bank transfer details arrive by email and payment is confirmed manually.
Frequently Asked Questions
Related: Is it safe to enter my card, and will bacteriostatic water ship in plain packaging?
Is it safe to enter my card and will bacteriostatic water ship discreetly in plain packaging?
Yes on both counts. Your card number is never typed into bacwaterdepot.com itself: placing an order opens a secure, HTTPS-only payment page the same moment you check out, and that page — not the store — is where card details are entered and handled by a PCI-compliant payment processor. If the page can't be reached right away, a secure payment link follows by email instead, so you're never asked to send card details any other way. Orders ship in a plain corrugated shipping box with a standard carrier label; the exterior does not describe the contents, so there is nothing about the package itself that flags what's inside.
Is it safe to put my card info in for bac water, and does it ship discreetly?
Yes. Bac water orders use the same secure, HTTPS payment page as every other order — your card number is entered there, under PCI-DSS controls, never on bacwaterdepot.com's own checkout form and never stored on our servers. Shipping is discreet in the ordinary sense: a plain corrugated box with a standard shipping label, no product name or description printed on the outside.
Is it safe to buy bacteriostatic water online?
Yes, when you buy from a supplier that proves what it ships. The trust checklist is: USP-grade product with the 0.9% benzyl alcohol concentration stated, a visible expiration date, tamper-evident sealed vials, a per-lot Certificate of Analysis you can actually read, a real US business address and contact, and prices that aren't unrealistically low. BAC Water Depot meets each: USA-made at an ISO 9001:2015 facility, USP <71> sterility tested, per-lot CoA published at /coa, a published US address, and a 30-day money-back purity guarantee. Checkout itself is SSL-encrypted with PCI-compliant payment, so entering your card is safe too.
Is checkout on this site secure?
Yes. The entire site runs over SSL/HTTPS, so every page — including checkout — is encrypted between your browser and the server (HSTS is enforced, so a browser will not fall back to an unencrypted connection). Card payment itself happens on a separate, HTTPS-only payment page reached by a signed request, not on a form hosted at bacwaterdepot.com. Your connection and your payment are handled to standard e-commerce security levels.
Is it safe to enter my credit card?
Yes. Card details are entered on the secure payment page run by the PCI-compliant processor, not on bacwaterdepot.com and not stored on our own servers — we never hold your full card number. This is the standard model for online payments: the processor handles the sensitive data under PCI-DSS controls, and the merchant only ever sees the order, not the card.
What happens right after I place a card order?
You're sent straight to the secure payment page to finish paying — there's no waiting on an email for the normal path. That page lives on its own HTTPS-only domain; if it can't be opened for any reason, the fallback takes over. The fallback is a secure payment link emailed to you, so a card order never depends on a single step working.
Will my order ship discreetly?
Orders ship in a standard plain corrugated shipping box; the exterior does not describe the contents. Bacteriostatic water is an ordinary sterile diluent sold openly by medical and lab suppliers, so there is nothing unusual about receiving it — but the package itself is a plain shipping carton, not branded packaging that announces what is inside.
How is my personal information handled?
Your information is used to process and ship your order. Payment data is handled on the secure payment page by the PCI-compliant processor rather than stored on our servers. The order is a routine domestic e-commerce transaction for a research supply — the same data handling as any online purchase.
What payment methods can I use?
Checkout offers card (including Apple Pay) on the secure payment page, or Zelle bank transfer with payment details sent by email. Whichever you choose, no card number is ever typed into bacwaterdepot.com's own checkout form, and the sensitive payment step runs on the PCI-compliant processor, not on the store's servers.
Order with confidence
Encrypted checkout, PCI-compliant payment, plain shipping. USA-made, per-lot CoA, same-day US dispatch. Research use only.