merchant-agreement

web hosting systems; and
(iii) all costs of the forensic analysis must be paid by you; and
(iv) in order to continue processing card transactions, you must undergo a full
Payment Card Industry Data Security Standard (“PCIDSS”) accreditation. All costs
of this accreditation exercise must be paid by you.
Your duties to cardholders
3.7. Subject to the other provisions of this agreement, you:
(a) must accept any valid and acceptable nominated card in a transaction; and
(b) must disclose to a cardholder before a transaction is completed any fee that you
will charge for completing the transaction and do it in such a way that allows the
transaction to be cancelled, without incurring any cost; and
(c) must only send us a sales transaction when you have provided the goods and
services to the customer; and
(d) must not accept a nominated card in a credit card transaction for the purpose of
giving a cardholder cash; and
(e) may accept any valid and acceptable nominated card in a debit card transaction for
giving a cardholder cash but you must not charge a fee for this; and
(f) must not sell, purchase, provide or exchange any information or document relating
to a cardholder’s account number, or nominated card number, or a transaction, to
any person other than:
(i) us; and
(ii) the agents you use in your business for an approved purpose; and
(iii) the card issuer; and
(iv) any other person as required by law; and
(g) must, if you do sell, purchase, provide or exchange any such information referred to
in clause 3.7(f), do so in compliance with all relevant law including privacy law; and
(h) must destroy any document that is no longer required to be retained, in a manner
which makes the information unreadable; and
(i) must take reasonable steps to ensure that the information and documents mentioned
in clause 3.7(f) are protected from misuse and loss and from unauthorised access,
modifi cation or disclosure; and
(j) must not make any representation in connection with any goods or services which
may bind us or any card scheme; and
(k) must not indicate or imply that we or any card scheme endorse any goods or
services or refer to a nominated card in stating eligibility for goods, services or any
membership; and
35