How payment processing works
When a patient makes a payment, whether in person or online, several parties are involved in completing that transaction. Understanding who they are helps you ask the right questions when choosing a provider.
The payment gateway is the technology that captures card details and securely transmits them. For in-person payments, a card terminal is the interface through which the payment gateway captures data. For online payments, it is the checkout integration on your website or booking system.
The payment processor handles the communication between your bank and the patient's bank, verifying that funds are available and authorising the transaction. The acquiring bank is the financial institution that holds your merchant account and receives the funds once a transaction is approved.
Many modern payment providers bundle all three into a single service, which simplifies things considerably. When you sign up with a payment provider, you are typically getting access to the gateway, processing, and a merchant account in one package.
What the regulations require
Payment processing is a regulated activity. There are three areas every UK-based pharmacy owner should understand.
FCA authorisation - Any provider processing payments on your behalf must be authorised by the Financial Conduct Authority (FCA). You can check this on the FCA Register at register.fca.org.uk. FCA authorisation means the provider is held to defined standards for how they handle merchant funds, how disputes are managed, and how your money is protected. If a provider is not on the register, do not use them.
PCI-DSS compliance - The Payment Card Industry Data Security Standard (PCI-DSS) sets out how card data must be stored, processed, and transmitted. As a merchant, you carry some responsibility here. A reputable payment provider will manage PCI-DSS compliance on your behalf, removing most of that burden. When speaking to a provider, ask directly: "Are you PCI-DSS compliant, and do you manage compliance for your merchants?" If they cannot answer clearly, that is worth noting.
Strong Customer Authentication (SCA) - Under PSD2 regulations, online card payments require Strong Customer Authentication. This is an additional verification step during checkout, such as a one-time passcode or biometric confirmation. Your payment provider should handle this automatically. If your online payments are completed without any authentication step, that is a compliance gap worth addressing promptly.
Understanding fees: what you are actually paying
Payment processing fees are often less clear than they should be. Most providers charge a combination of the following.
Transaction fees are a percentage of each payment, sometimes with an additional fixed amount per transaction (for example, 1.4% + 20p). Monthly fees are a fixed charge for access to the platform or account. Chargeback fees are charged when a patient disputes a transaction. Refund fees apply at some providers even when the original transaction fee is not returned. Terminal rental applies if you are leasing card machines rather than buying them outright.
Flat rate pricing charges the same percentage regardless of how much you process. Volume-based pricing reduces your rate as your transaction volume grows. For pharmacies with consistent monthly payment volumes, volume-based pricing is typically more cost-effective. It is worth asking any provider whether their rates are negotiable based on volume, as many will not volunteer this information unless asked.
Online versus in-person payments
Most pharmacies now take payments through more than one channel. In-person at the till remains the most common, but online payments for bookings, consultations, or prescription orders are increasingly part of the mix. Your payment setup should work consistently across both channels.
For online payments, look for a provider whose checkout integrates directly into your website or booking platform, so patients are not redirected to a third-party page during the payment process. Redirects reduce trust and increase abandonment. Ensure the checkout works on mobile, and that digital wallets such as Apple Pay and Google Pay are supported.
For in-person payments, the key questions are speed, reliability, and what happens if the connection drops. A terminal that fails during a busy dispensing period causes real disruption. Check what the providers' support response time looks like.
If you are taking payments across both channels, look for a provider that consolidates everything into a single dashboard. Having to log into two separate systems to reconcile transactions adds unnecessary time and creates room for error.
What to look for in a payment provider
Choosing a payment processor is not just a compliance exercise. The right provider supports the financial health of your pharmacy and the experience your patients have. Here is what a good fit looks like in practice.
Processing costs - Many independent pharmacies are overpaying on processing fees, often because they are using a legacy provider or one designed for general retail rather than healthcare. Providers offering volume-based pricing, where your rate decreases as your transaction volume grows, can offer meaningful savings compared to flat rate alternatives. Over a year, that difference has a real impact on your bottom line.
Admin overhead - A well-integrated payment setup reduces the administrative burden on your team. When in-person and online transactions are visible in a single dashboard, reconciliation takes minutes rather than an hour of cross-referencing. Disputes and chargebacks are managed in one place.
Compliance handling - PCI-DSS compliance, SCA requirements, and FCA regulations all carry real obligations. A payment processor that handles these on your behalf means you are not carrying that compliance burden yourself. For a pharmacy team already managing GPhC standards and NHS contract requirements, removing that layer of payment compliance responsibility has genuine operational value.
Patient experience - The payment moment is part of the patient experience. A checkout that works on mobile and accepts digital wallets builds trust. For patients paying for private consultations or services, a professional payment experience reinforces confidence in your pharmacy overall.
Quality of support - When something goes wrong with your payment setup, the quality of your provider's support matters. A dedicated account manager who understands pharmacy operations is a different experience from a generic support ticket system. Knowing there is a specific person to call, who knows your setup and your business, is worth accounting for when choosing a provider.
Payment infrastructure is rarely the most exciting part of running a pharmacy. But getting it right has a real impact on the financial health of your business. Understanding what you are paying, ensuring you are compliant, and having a setup that works across all your channels all contribute to that. The good news is that the options available to independent pharmacies have improved significantly in recent years, and switching to a better arrangement is often simpler than it sounds.
