Page 2 of 2

Posted: Wed Feb 15, 2017 1:00 pm
by Essar
BC are not compliant. It is up to the card processor to be compliant.

I use FreeToBook as my channel manager and through them the FabPay system. The card payments are processed through WorldPay. Even though the card details are available to me on the BC extranet for up to 7-days/3-views I never need to. All card details are held by WorldPay and any additional payments are done through the FabPay system on FTB. I never see card details on FTB or WorldPay. Of course all direct bookings through my website use the same system, I never see card details for these reservations.

Every year WorldPay make me go through a compliance questionnaire to re-establish my commitment to the compliance certificate I was originally issued when I joined the scheme. It's straightforward but very formal.

Posted: Fri Feb 17, 2017 2:25 pm
by ianthy
Hi Essar

I am following this thread with interest as Booking.com payments have always been a nightmare for me. I get bookings then the guests are mystified why I am then asking for their card details or sending a PayPl link. By using FreeToBook - is there a direct link to Booking.com that picks up the card details entered by the guests and then processes the payment?

Sorry if this is an obvious question.

Thanks


Essar wrote:BC are not compliant. It is up to the card processor to be compliant.

I use FreeToBook as my channel manager and through them the FabPay system. The card payments are processed through WorldPay. Even though the card details are available to me on the BC extranet for up to 7-days/3-views I never need to. All card details are held by WorldPay and any additional payments are done through the FabPay system on FTB. I never see card details on FTB or WorldPay. Of course all direct bookings through my website use the same system, I never see card details for these reservations.

Every year WorldPay make me go through a compliance questionnaire to re-establish my commitment to the compliance certificate I was originally issued when I joined the scheme. It's straightforward but very formal.

Posted: Fri Feb 17, 2017 2:38 pm
by Hells Bells
I was having this problem too. I've solved it by asking BC to activate the CVC code option (which I can view once only) and processing the booking through Wave Apps. Wave are PCI level 1 compliant. You can enter the guests card details on Wave, you don't have to send the invoice to the guest.

Posted: Fri Feb 17, 2017 2:59 pm
by ianthy
Hells Bells wrote:I was having this problem too. I've solved it by asking BC to activate the CVC code option (which I can view once only) and processing the booking through Wave Apps. Wave are PCI level 1 compliant. You can enter the guests card details on Wave, you don't have to send the invoice to the guest.
Do you have a link to the app?

Thanks.

Posted: Fri Feb 17, 2017 3:01 pm
by sylvainbg
Why not using directly stripe and store on stripe vault the card details?

Posted: Fri Feb 17, 2017 3:06 pm
by Hells Bells
Sorry, forgot the link https://www.waveapps.com/. You can ignore all ths stuff about linking bank accounts, that is just for the accounting package.

Posted: Fri Feb 17, 2017 3:31 pm
by ianthy
sylvainbg wrote:Why not using directly stripe and store on stripe vault the card details?
Can I use this application with the information stored on Booking.com eg guest card number and CVC code?

Thanks

Posted: Fri Feb 17, 2017 3:33 pm
by sylvainbg
Yes you can directly and no extra cost.

Connect on the dashboard and click on customers or payment if you want to save there the information.

Posted: Fri Feb 17, 2017 3:39 pm
by Hells Bells
One reason might be that the processing fees for Wave, despite it using the Stripe platform are less than the processing fees for Stripe.

Posted: Fri Feb 17, 2017 3:42 pm
by ianthy
Thanks all this is great info. Now I am off to see if I can put it into practice and solve the headache of Booking.com payment processing.

Posted: Fri Feb 17, 2017 6:10 pm
by newtimber
Hells Bells wrote:I was having this problem too. I've solved it by asking BC to activate the CVC code option (which I can view once only) and processing the booking through Wave Apps. Wave are PCI level 1 compliant. You can enter the guests card details on Wave, you don't have to send the invoice to the guest.
It doesn't solve your main problem which is booking.com is not PCI DSS compliant and if you are asking BC to store the CVC code, you are not going to be PCI DSS compliant. https://www.pcisecuritystandards.org/pd ... torage.pdf