SPONSORED CONTENT

Are you ready to do business?: new traders need to do a PCI complaince questionnaire
You are about to start a new business. Your card machine will probably show up a few days before you open. It’ll sit in its box on the counter while you’re still painting, sorting stock, stacking shelves, wiping tables.
Most owners treat it like a kettle, something you plug in and forget about. That can be a costly mistake.
There’s a stack of obligations tied to accepting card payments and nobody bothers to mention them until you’ve already tripped up. By that point, you’re scrambling to fix problems that didn’t need to exist.
Pick a terminal and provider that fits how you’ll trade
Before anything else, you need to work out who’s going to process your card transactions.
Small businesses typically choose between a traditional merchant account with a payment processor or an all-in-one provider like Zeller, Square or SumUp, where the terminal and processing come bundled together.
If you’re running a café or shop, the all-in-one route will save you headaches because fees are flat-rate and there’s barely any paperwork. But think about the day-to-day reality too.
A busy counter needs something portable that runs on wi-fi, while a market stall trader will care far more about battery life and whether there’s a decent mobile signal.
The PCI compliance questionnaire nobody warns you about
Every business that takes card payments has to comply with the Payment Card Industry Data Security Standard (PCI DSS). Doesn’t matter if you’re one person behind a till or a chain of 10 shops. The rules kick in from Day 1.
What this actually looks like in practice is a self-assessment questionnaire. Your payment provider or acquiring bank will ask you to complete one within the first few months and it covers how you take payments, where card data ends up, how you store it and what security measures you’ve got in place. Different versions exist depending on your setup. If you’ve got an online shop or an integrated till system, the requirements will be tighter and more detailed.
The tricky part is that the questionnaire assumes technical knowledge most new owners don’t have yet, so plenty of people guess their way through it just to get it off the desk.
It’s far easier to get PCI compliance support before you submit anything, because a true specialist will make sure the answers reflect how your business actually handles card data. And whoever fills it in, don’t tick boxes just to make the form go away, because those answers are what you’ll be held to if anything ever gets questioned.
Get your daily habits right from the start
Once you’re up and running, reconcile your terminal totals against your bank deposits every day without fail. Card transactions don’t always settle straight away and processing fees get taken out before the money hits your account, so the numbers on the terminal won’t line up with what you actually receive.
Keep records of everything.
If a customer disputes a payment and you can’t back up your side of it, that money leaves your account.
Process refunds back to the original card, always. Make sure anyone on your team who handles transactions knows what suspicious activity looks like and what to do about it. A quick walk-through with staff before opening day takes 10 minutes and will stop the kind of slip-ups that annoy customers and leave your business exposed.
The boring stuff is what keeps you open
Opening a business is messy enough without a compliance headache dropping on you in your first quarter. That card machine on the counter might be the simplest looking bit of kit in the shop, but the obligations behind it aren’t optional, and they won’t wait for you to catch up. Get your PCI questionnaire done and build a daily reconciliation habit. Train your staff before you start trading.
All of that will cost you far less time and money than trying to bolt it on afterwards. New independents open on Croydon’s high streets all the time, full of energy and big plans. The ones still trading a year later got the unglamorous operational detail locked down early.
Card payments are one part of that, and they touch every single customer who walks through your door, so get them right before you serve your first one.
PAID ADS: To advertise your services or products to our 10,000 weekday visitors to the site, as featured on Google News Showcase, email us inside.croydon@btinternet.com for our unbeatable ad rates
Inside Croydon is a member of the Independent Community News Network
What this actually looks like in practice is a self-assessment questionnaire. Your payment provider or acquiring bank will ask you to complete one within the first few months and it covers how you take payments, where card data ends up, how you store it and what security measures you’ve got in place. Different versions exist depending on your setup. If you’ve got an online shop or an integrated till system, the requirements will be tighter and more detailed.