If your department needs to accept credit cards for a one-time, special event, the PCI Team has a solution: a payment card terminal and/or an online storefront. This loaner program is available to all W&M departments.
Departments can request to use the Clover Flex payment card terminal for in-person/phone orders. For online sales, departments can use an online storefront through the university’s eCommerce platform, Touchnet Marketplace. Both solutions are PCI-compliant and do not require a new merchant account. Departments are responsible for ensuring all processes, procedures, and technologies follow the security standards dictated by the PCI DSS and as approved by Financial Operations, Information Technology, and the PCI Committee.
To get started, please get in touch with the PCI Committee [[pci]] to discuss your department’s needs.
A collapsible table containing Rules & Procedures for using Clover Flex
Clover Flex Loaner Program
Overview
The payment card terminal will be a Clover Flex device. The Clover Flex will be set to work on the W&M wireless network unless cellular is needed. The Cashier’s Office will be set up accordingly.
The terminal accepts Visa, MasterCard, Discover, and American Express credit and debit cards.
The Clover Flex can accept chip, tap and traditional swipe cards.
There is no cost to use the terminal itself; however, the department is responsible for all payment card processing fees (typically 2-4% of the transaction amount) accessed by MC, VISA, DISC, AMEX, and our payment card processor. The department is also responsible for transactions and associated fees disputed by your customers (“chargebacks”).
The department is responsible for securing the terminal at all times.
The department is responsible for the loss or damage to the borrowed payment card terminal. The replacement cost is estimated at $700.
All training must be completed and confirmed before the device is provided.
The terminal is for in-person and phone orders only. Email and Fax orders cannot be accepted as they violate PCI DSS and W&M policy. Cardholder data MUST NOT be written down or stored.
Only those employees who have completed training and provided a Clover Flex PIN are authorized to handle credit cards for said department.
The Requestor must pick up, sign for, and return the payment card terminal in person at the Cashier’s Office in Blow Hall. The package consists of the following:
Box/Carrying Case
Clover Flex Terminal
Electrical Cord and charging base
Procedures
Contact the PCI Committee at [[pci]] to discuss the need to accept credit cards on a temporary basis.
Confirm usage of the Clover Flex. Confirm it is available for use during the specified time. The requesting department will be instructed to proceed to Step 2 if available. (DO NOT COMPLETE Step 2 until you discuss the need with the Cashier’s Office.) The Clover Flex must be reserved at least seven business days before your event and is available on a first-come, first-serve basis. The Clover Flex is used for sanctioned university-approved events.
Confirm the usage of a TouchNet Marketplace Storefront.
Complete the required training, which will take at least 60-90 minutes. All team members handling credit card payments must complete this training before using either the Clover Flex or TouchNet Marketplace Storefront.
The Cashier’s Office will contact the Requestor regarding the required training. Training is located in Cornerstone (for employees) and Blackboard (for students/volunteers). The training consists of the following:
W&M Payment Card Industry DSS Training
W&M Security Education and Awareness Training
Signing the Payment Card Security and Confidentiality Agreement.
Submit a Clover Flex Access Request form for each employee using the device AFTER training is completed. Once forms are received, Clover Flex training will be scheduled.
Acknowledge receipt of Clover Flex device; signature required by the Requestor.
Accept and process payment cards on the day(s) of the event.
Closeout sales. (Specific closeout procedures will be established between the Cashier’s Office and the department when the device is loaned out. In general, the payment card terminal must be closed out at the end of each day. A copy of the batch settlement report and deposit transmittal should be prepared daily and sent to the Cashier’s Office by the next business day for recording in Banner Finance.)
Please return all the equipment, including the box/carrying case, terminal, electrical cord, and charger base, to the Cashier’s Office by the first business day after the event.
The Cashier’s Office will review/inspect the Clover Flex and ensure activity is closed out, access is terminated, and wireless reset if applicable.)
TouchNet Marketplace Storefront Program
Overview
A TouchNet Marketplace Storefront will be created under the W&M Sales (loaner program) merchant ID.
The department will be responsible for working with the W&M TouchNet administrator to build out the storefront and products, etc.
The store accepts Visa, MasterCard, Discover and American Express credit and debit cards.
The store is for online sales only. All sales must be initiated and completed by the customer. W&M personnel are not allowed to process a transaction through the storefront on the customer’s behalf.
Email and Fax orders cannot be accepted as they violate PCI DSS and W&M policy.
Cardholder data MUST NOT be written down or stored.
There is no cost to use the TouchNet Marketplace Storefront; however, the department is responsible for all payment card processing fees (typically 2-4% of the transaction amount) accessed by MC, VISA, DISC, AMEX, and our payment card processor. The department is also responsible for transactions and associated fees disputed by your customers (“chargebacks”).
The department is responsible for monitoring sales and answering any customer-related questions.
The Requestor is responsible for requesting access to TouchNet for self and other team members using the RequestIT/TouchNet Access request form.
All training must be completed and confirmed before access to the storefront will be enabled.
Only those employees who have completed training and been provided access to TouchNet Marketplace are authorized to handle credit cards for said department.
The Requestor will be the acting store manager and work with the W&M TouchNet Administrator on setting up and executing the storefront.
Procedures
Contact the PCI Committee at [[pci]] to discuss the need to accept credit cards on a temporary basis.
Confirm usage of the Clover Flex. Confirm it is available for use during the specified time. The requesting department will be instructed to proceed to Step 2 if available. (DO NOT COMPLETE Step 2 until you discuss the need with the Cashier’s Office.) The Clover Flex must be reserved at least seven business days before your event and is available on a first-come, first-serve basis. The Clover Flex is used for sanctioned university-approved events.
Confirm the usage of a TouchNet Marketplace Storefront.
Complete the required training, which will take at least 60-90 minutes. (All team members handling credit card payments must complete this training before using either the Clover Flex or TouchNet Marketplace Storefront.)
The Cashier’s Office will contact the Requestor regarding the required training. Training is located in Cornerstone (for employees) and Blackboard (for students/volunteers). The training consists of the following:
W&M Payment Card Industry DSS Training
W&M Security Education and Awareness Training
Signing the Payment Card Security and Confidentiality Agreement.
