It's arguably negligent to not block TOR traffic from your payment page. People should otherwise be able to read at least the static parts of your site from TOR.