best cc merchant provider for small businesses?

[scenter]

Hello, I'm looking for a cc merchant provider system which can have low rates, no tricks of add on fees and that is not going to ask me for my family history when applying for it. I was looking into paypal pro, any advice using that one? can someone recommend me a better choice? Cheers!

 

[alanc]

If you're serious about taking payments online, I would avoid PPP. They are not PCI-DSS compliant, and they have not implemented 3D Security (AKA SecureCardVbV). Both of these things are becoming essential.

Here's a quote from their own information pages:

04-10-2008 08:59 AM

If you want or need SecureCard or VbV, obtain your own merchant account and gateway for direct credit card processing and just use PayPal for person-to-person payments.

 

[SCArt]

The whole PCI DSS compliance issue and the need to use SecureCode and Verified By Visa are REALLY important if you accept CC payments online and want to avoid potential fines.

As a small business, I have gone down the very safe and simple route of outsourcing to a Payment Service Provider (SagePay) which is PCI DSS compliant so I don't have the worry of it myself. I have my own merchant account set up with HSBC who recommended a company to act as the Qualified Security Assessor (a requirement). As I do less than 20,000 transactions per year I just had to do a simple online questionnaire to confirm PCI DSS compliance for a nominal sum (£11.99)

There may be cheaper options but I have always had a good service from both my bank and PSP and no hassle.

The whole PCI DSS thing looks really daunting at first but, as a small business, it has been easy to sort out.

SCArt
http://www.stylecube.co.uk
Unique Modern Art

 

[Cloughie]

I have used Protx (now taken over by Sage) and it was quick and easy to set up and I remember the fees being competitive. Always easy to deal with via phone too.

 

[SCArt]

"SagePay" is what used to be called Protx - same product and it costs me around £20/month for less than 1,000 transactions.

My whole setup is:

website - RomanCart shopping Cart - SagePay PSP - HSBC "acquirer"(bank)

Works for me!

 

[bdw]

Paypal hosted products are all PCI DSS compliant. As I understand it Paypal pro payments take place on your on website so compliance issues are your responsibility as with any other processor.

See https://www.paypal-marketing.co.uk/merchantservices/PDFs/pci_dss.pdf

 

[SCArt]

Don't know about PayPal as we don't use it but I do know that by using "SagePay Go" I have outsourced my payments to them and do not have to worry about PCI DSS compliance - other than to do the simple online questionnaire to confirm I have outsourced my payments to a PCI DSS compliant payment service provider!

Definitely worth it for me for the peace of mind

SCArt

 

[OfficeNinja]

Paypal hosted products are all PCI DSS compliant. As I understand it Paypal pro payments take place on your on website so compliance issues are your responsibility as with any other processor.

But if you use a 3rd party such as Sagepay who are PCI Compliant, and you don't handle credit card details manually (ie. take them over the phone), then you can fill in a simple(-ish) "Self Certification" form to say that you're PCI Compliant.

You basically say "I never see the card details, it's all handled by Sagepay who are PCI Compliant, therefore I am to"

 

[Snippa]

I've used PayPal for nearly 10 years and they've been great to work with. I've had a couple of attempted chargebacks but PayPal always came out on my side (which I can't say for the Merchant's account I used to have), and they're great to work with. Just depends on what you're looking for.