Am I responsible for payment security?

Payment is collected by an external payment gateway such as PayPal, Sage Pay, World Pay, or Barclay Card, or similar. All responsibility for payment security is covered by your chosen payment gateway provider; this is part of what you pay a fee for. The payment transaction is handled in its entirety by their website before handing the customer back to your website once payment has securely and successfully collected on your behalf.
WooCommerce Frequently Asked Questions