Payments and card security

Last updated 8 November 2026

Who takes card payments, how your card is protected, and Strong Customer Authentication.

These pages are published by Vesopa Software Ltd, a private limited company registered in England and Wales, company number 17362206, registered office Baglan Innovation Centre, Central Avenue, Baglan, Port Talbot, SA12 7AX, Wales, United Kingdom. Contact: info@vesopa.com, telephone +44 1792 316282. In these pages "Vesopa", "we" and "us" mean Vesopa Software Ltd.

1. Who processes payments

We never see or store your full card number. Card payments are processed by regulated payment providers:

• Stripe (Stripe Payments UK Ltd and Stripe Payments Europe Ltd) processes payments to Vesopa on vesopaepos.com, and Tap to Pay and card readers for venues that choose Stripe.
• Dojo (Paymentsense Limited), Teya and Barclaycard process payments for venues that choose them, under each venue's own agreement with that provider.

Each provider is authorised by the Financial Conduct Authority or another European regulator, and certified to PCI DSS Level 1, the highest level of the Payment Card Industry Data Security Standard.

2. Paying on our websites

• Payments to Vesopa are taken on our own page at vesopaepos.com: card, Apple Pay, Google Pay or Link. The card fields are provided by Stripe inside a secure frame, so the card details go straight from your device to Stripe over an encrypted (TLS) connection.
• Prices are in pounds sterling (GBP). Business prices are shown excluding VAT, which is added at 20% where it applies, and your VAT invoice is emailed when the payment is confirmed.
• Strong Customer Authentication: under the UK and EU Payment Services Regulations your bank may ask you to confirm a payment (3-D Secure, a code or your banking app). Apple Pay and Google Pay confirm with Face ID, Touch ID or your device PIN.
• The statement shows VESOPA with a short reference.

3. Paying in a venue

• Tap to Pay on iPhone and Android, and card readers, read the card directly through the payment provider's certified software. The venue's staff never see the card number or the PIN.
• When a PIN is needed, it is entered on the payment provider's secure PIN screen, which the customer uses directly.
• The venue is the seller. Vesopa provides the software and records the result the payment provider returns.

4. How we protect your data

• All our sites and apps use encrypted connections (HTTPS, TLS 1.2 or later).
• Payment provider keys are held only on our servers, never in an app or a web page.
• Access to customer data is limited to staff who need it, protected by strong sign-in, and logged.
• We keep payment records for six years, as UK tax law requires, and nothing more about your card than the provider returns (for example "Visa ending 4242").

5. Report a problem

If you think a payment is wrong or your card has been misused, contact your bank at once and tell us at info@vesopa.com. To report a security issue in our software, email support@vesopa.com with "Security" in the subject.