Taking payments online via personal website
<p>I'm very close to releasing a business website with my brother-in-law.</p>

<p>It's a brewery business (based in the UK) and we'll be taking payments via a secure payment gateway, such as PayPal.</p>

<p>As we'll be selling online, do I need to have anything in place before taking credit card payments? All the security side of things will be handled by a third party gateway. We won't be holding any sensitive customer data in our databases.</p>

<p>Thanks in advance.</p>

<p>It's illegal in the United Kingdom to supply alcohol to people who are under 18.</p>

<p>Your use of Paypal will <em>assist</em> here, as Paypal have a <a href="https://www.paypal.com/uk/webapps/mpp/ua/privacy-full" rel="nofollow">minimum age limit</a>:</p>

<blockquote>
  <p><strong>A Special Note about Children:</strong> Children are not eligible to use PayPal Services and we ask that minors (persons under the age of 18) do not submit any personal information to us or use the PayPal Services.</p>
</blockquote>

<p>However, this does not appear to be sufficient to satisfy <a href="http://www.legislation.gov.uk/ukpga/2003/17/section/146" rel="nofollow">Section 146 of the Licensing Act</a>, because <strong>you</strong> have to take all reasonable steps to establish the purchaser's age, and that means that <strong>you</strong> have to ask for evidence. Note the <strong><em>and</em></strong> at the end of 146(4)(a):</p>

<blockquote>
  <ol start="146">
  <li><p><strong>Sale of alcohol to children</strong></p>
  
  <ol start="4">
  <li><p>Where a person is charged with an offence under this section by reason of his own conduct it is a defence that—<br>
  (a) he believed that the individual was aged 18 or over, and<br>
  (b) either—<br>
  &nbsp; (i) he had taken all reasonable steps to establish the individual’s age, or<br>
  &nbsp; (ii) nobody could reasonably have suspected from the individual’s appearance that he was aged under 18.</p></li>
  <li><p>For the purposes of subsection (4), a person is treated as having taken all reasonable steps to establish an individual’s age if—<br>
  (a) he asked the individual for evidence of his age, and<br>
  (b) the evidence would have convinced a reasonable person.</p></li>
  </ol></li>
  </ol>
</blockquote>

<p>To satisfy this requirement, I believe it will be necessary to ask the purchaser for evidence of age, since that is the reasonable step required by 146(5) and 146(4)(b)(ii) cannot apply to a website.</p>

<p>If you were accepting payments yourself rather than relying on a third party, then evidence of a credit card would probably be sufficient. But a Paypal account can be linked to a debit card, and those are available to under-18s.</p>

<p>Some jurisdictions abroad have a minimum age of 21 for the supply of alcohol, and you will need to decide how to deal with that.</p>

<p>One way to do all of this might be to use the UK Government's <a href="https://www.gov.uk/view-driving-licence" rel="nofollow">driving licence service</a> which allows holders of driving licences to freely generate and give you a code to check their driving licence. [Purchasers generate the code at that link; check it <a href="https://www.viewdrivingrecord.service.gov.uk/driving-record/validate" rel="nofollow">at another point</a>]. Most driving licence categories expire the day before the holder's 70th birthday, so you can work out how old they are. Once you have this proof of age, you could store it so the purchaser only has to go through the hoop once. A scan of photograph of a licence or passport would also suffice.</p>

<p>As WBT has commented, you need the correct licences to supply alcohol in the first place, but you asked specifically about payments.</p>

united-kingdom business liability