Z.H. RENTALS · BARBADOS
Payment Security
How Z.H. Rentals handles hosted online payments while keeping raw card data out of the rental-management system.
How hosted online payment works
When PayPal is offered for a booking, Z.H. Rentals calculates the approved rental amount in BBD and creates the hosted PayPal checkout server-side using the configured BBD-to-USD conversion snapshot.
- The customer selects dates and an available vehicle on zhrentals.net.
- Z.H. Rentals creates and records the approved booking amount in BBD.
- The customer is transferred to PayPal’s hosted checkout to approve the payment.
- Z.H. Rentals verifies/captures the transaction server-side and reconciles the result using provider references and webhooks.
- Z.H. Rentals records the payment status, currency and provider transaction references; raw card numbers and CVV are not stored by Z.H. Rentals.
Cardholder data
Z.H. Rentals does not intend to store card numbers, CVV/security codes or magnetic-stripe/chip data in the rental-management database. Payment records are limited to operational information such as amount, status, currency and provider transaction reference.
Provider authentication and fraud controls
Hosted payment providers apply their own account, authentication and fraud controls. If a separate direct card gateway is activated later, Z.H. Rentals will use the authentication and fraud controls required by that approved provider, including 3-D Secure where applicable.
PCI DSS
Z.H. Rentals keeps raw cardholder data outside the rental-management application by using provider-hosted/tokenized payment flows. Any future direct card-gateway integration will follow the PCI DSS responsibilities assigned for that approved architecture.
Current payment status
PayPal-hosted online checkout is active when it is offered for an approved booking. Customers may be offered PayPal Wallet or eligible debit / credit card checkout through PayPal Guest Card. Payment credentials are entered only in PayPal-hosted checkout; Z.H. Rentals does not collect or store raw card numbers, expiry dates or CVV. Card security-hold processing remains separate unless the site explicitly presents that capability.