Secure payment

How payment is handled and what protects you at checkout.

Last updated: 1 Jul 2026

Hosted fields and SCA

Payment fields are served by a PCI-validated provider inside an isolated frame. Strong customer authentication (3-D Secure) is requested where the card issuer or market requires it.

Duplicate protection

Every booking and cancellation carries an idempotency key. Pressing back, refreshing or double-clicking cannot create a second booking or a second charge.

Cookies and your privacy

We use essential cookies to run the booking flow. Analytics and marketing cookies are optional and off until you accept.