Merchants

What are the general requirements on my website?

In order to get a merchant account, your website needs to fulfil the requirements below.

Technical setup for all website pages

• should be protected by TLS certificate
• should be under one domain name, including callbacks
• to ensure a good customer experience if operating subdomains only 2nd level domain structure should be used
• All website pages must be available and contain updated information

Contact and company information

Following information should be clearly available to the customer:

• Registered name, address and registration number of the legal entity
• Contact and Customer support information (operating hours, phone number, email address)
• About Us, T&Cs, Privacy policy, Contact Us pages links on the home page

Pricing and currencies

• Pricing of products and services (with currencies and amounts) needs to be clearly available for all visitors and/or customers
• If order currency differs from payment currency, this should be indicated before purchase

Terms and conditions and Privacy policy

• Terms and conditions and Privacy policy need to be clearly available for all visitors and/or customers
• Terms and conditions needs to be accepted manually by the cardholder when opening an account and/or during checkout. 
• Please see further below for minimum information to be included in these documents

Bank statement descriptor

• is the name that will appear on the customer’s bank statement showing who they have paid money to
• should be the Company’s URL or trade name whichever is easier to link to your web shop
• Must be clearly available during checkout

Visa and Mastercard brands

• Visa and Mastercard logos must be clearly available on the website and during the checkout process

Links to the pages of Mastercard and Visa

Checkout flow

• Merchant outlet location must be clearly displayed during the checkout process
• After successful payment, the cardholder should be sent to a confirmation page where they should be provided with information on the result of the transaction, order details and instructions to receive the order.
• After successful payment, email confirmation with order and payment details should be sent by merchant to the customer
• Payment currency and amount shown to customer on merchant’s website before purchase should be equal to actual transaction currency and amount

Licence information for regulated business activities

If merchant’s business activities are regulated either in merchants jurisdiction or in customers jurisdiction then the following information should be clearly available on the website: 

• information on the licence/permission/registration name, number, jurisdiction 
• regulator’s name and if available, link to the registry 

Age and export restrictions

• Viewing or purchasing age restricted products or services should not be available to the customer until they confirm they are of legal age (18+) by manually accepting an age restriction notice
• Legal restrictions notice (e.g. related to customer’s location country or citizenship country) should be shown before purchase if applicable
• Merchant should notify customers of their obligation to independently determine whether the relevant local legislation allows purchase of such goods or services through Internet using card payments

Terms and conditions (should contain)

• information about the Business registered name, identification number, registered address, intermediary if any
• fulfilment and delivery policy and shipping costs, tax information and timeframes
• right of withdrawal/Refund/Return/Exchange policy, Cancellation policy, clearly described and clearly presented. Confirmation for cancelling service should be provided a via email
• return and refund Timeframes, costs/fees and other conditions clearly indicated.
• the location of the Merchant Outlet,
• easily accessible merchant contact information,
• conditions to close/terminate the account
• copyrights
• applicable law and jurisdiction
• information and contact of the payment service provider

Data Privacy protection policy (should contain)

• legal entity details and contacts of Data Protection Officer
• statement that merchant does not sell personal information they are collecting
• should be on a separate page