Good question. I've recently tried a few vendors who are supposedly official distributors/retailers of the R4 gold, or whatever they call it. It's alarming how many don't have secure webpages when entering all your private data. Not naming any names. Still haven't bought one.