takepayments

Finance & Payments United Kingdom Website Reviewed Sept. 22, 2026

UK card payment provider supplying card machines and online payment services to small businesses as an independent sales organisation.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
Cyber Essentials IASME-backed (BlockMark Registry) The only certification takepayments claims for itself. Certificate number, body, scope and dates are on the BlockMark record, not published inline. — — Current

Compliance Frameworks

Cyber Essentials
Partial
Certificate mark links to the BlockMark Registry; detail not published inline.
PCI DSS v4.0
Partial
takepayments claims NO PCI DSS certification of its own — its PCI pages describe helping merchants complete SAQs. Recorded here only to prevent misreading.
GDPR 2016/679
Partial
Website Privacy Notice, Merchant Data Processing Notice and a published sub-processor list; no DPO named and no ICO number published.

Regulatory status — read the nuance

takepayments Limited is FCA-authorised under **firm reference number 663112**, effective 15 Feb 2015 — but the authorisation is specifically for **consumer hire** (terminal rentals to sole traders, small partnerships and unincorporated bodies). It is **not** a payment services or e-money authorisation.

Separately, takepayments is **licensed by Mastercard and Visa Europe as an Independent Sales Organisation**. An ISO licence is a commercial registration, **not a PCI DSS service-provider validation** — keep the two apart.

⚠️ **Do not list PCI DSS as a takepayments certification.** Its PCI content describes obligations it imposes on and supports for its customers.

No security contact, disclosure page, bug bounty or security.txt found. Company 03102137.

Assess takepayments in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.