This policy outlines the acceptable use, management, and security requirements for all credit card terminals used in the business to ensure secure payment processing and compliance with applicable laws and standards, including PCI-DSS (Payment Card Industry Data Security Standard).
This policy applies to all employees, contractors, and third parties who handle or have access to credit card terminals within the business.
- Acceptable Use
The accepted forms of credit card payments should ONLY be as follows ;
- Insert card and customer to input the pin
- Card contactless under €50
- Contactless using a mobile phone
Credit card terminals must only be used for:
- Processing legitimate business transactions.
- Authorized activities related to customer payments.
Unacceptable use includes:
- Personal transactions.
- Processing transactions on behalf of third parties not affiliated with the company.
- Allowing a customer to enter the long number of the credit card as payment
- Security Requirements
Physical Security:
- Never leave terminals unattended in public areas.
- Keep terminals in a secure area when not in use.
Access Control:
- Only trained and authorized personnel may operate terminals.
- Login credentials (if applicable) must not be shared.
Data Security:
- No credit card data (e.g., full card numbers, CVV) may be stored on paper or electronically unless authorized and encrypted.
- Do not write down or photograph customer card information.
Tampering Checks:
- Staff must inspect terminals daily for signs of tampering.
- Report any unusual modifications or damage immediately.
- Transaction Procedures
- Always verify the amount before processing.
- Provide customers with receipts when requested.
- Void incorrect transactions immediately, and report errors to a supervisor.
- Training
All employees who use credit card terminals must complete training on:
- Proper use of equipment
- Fraud detection
- Incident reporting
- Incident Reporting
Suspected fraud, loss, or tampering must be reported immediately to:
- Manager/Supervisor
- Policy Review
This policy will be reviewed annually or upon significant changes to operations, regulations, or compliance standards.
