I always go directly to the companies website to give information like this. You can't fall for the dancing bunny if you never ever respond through email.
That would require them to have an e-commerce presence. I was wondering how one would give it to a brick and mortar store (meaning one without facilities to accept them online securely).