Regulatory Information

Stored operates in a regulated industry and works only with FCA-authorised partners. This page explains how we are structured, who regulates the services you rely on, and the standards we hold ourselves to.

1. Stored company information

Stored is a trading name of Stored Payments Limited, a company incorporated in England and Wales.

• Company number: 14872319
• VAT number: GB 412 7831 09
• Registered office: 4th Floor, 86–90 Paul Street, London EC2A 4NE
• Trading address: same as above
• ICO registration number: ZB987654

Stored Payments Limited is a payment facilitator and distributor of regulated services. We do not, ourselves, hold permissions for the regulated activities of acquiring or issuing, these services are provided through our authorised partners.

2. Regulatory partners

We work with regulated payment institutions for the elements of our service that require authorisation. Where you accept a card payment through Stored, your acquirer will be one of the following entities:

Worldpay (UK) Limited

Authorised by the Financial Conduct Authority under the Payment Services Regulations 2017 for the provision of payment services. FCA Firm Reference Number 530923. Worldpay is a principal member of Visa and Mastercard and provides acquiring services for the majority of Stored merchants.

Cashflows Europe Limited

Authorised by the Financial Conduct Authority as an Electronic Money Institution under the Electronic Money Regulations 2011. FCA Firm Reference Number 900006. Cashflows provides acquiring and e-money services for selected Stored merchant segments.

Clover Network UK Limited

Provides certified POS hardware and software under licence to Stored and our merchants. Clover’s payment processing on our platform is delivered through Worldpay.

3. Card scheme compliance

Stored and its partners are fully compliant with the Payment Card Industry Data Security Standard (PCI DSS) at Level 1, the highest tier, assessed annually by an independent Qualified Security Assessor.

We are registered with Visa and Mastercard as a Payment Facilitator under each scheme’s respective programme. American Express, Diners Club and Discover acceptance is offered through scheme partnerships negotiated by our acquirers.

All terminals and online checkouts supplied by Stored are EMVCo Level 2 certified, support 3-D Secure 2.x and meet the Strong Customer Authentication (SCA) requirements under PSD2.

4. Anti-money laundering (AML)

Stored is committed to preventing the use of its services for money laundering, terrorist financing and other financial crime. We operate a risk-based AML programme that complies with the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 and FCA guidance.

Our programme includes:

• Customer Due Diligence (CDD) on every merchant at onboarding, including identification of beneficial owners and politically exposed persons (PEPs)
• Enhanced Due Diligence (EDD) for higher-risk merchants and industries
• Ongoing transaction monitoring with automated and manual review
• Suspicious activity reporting (SARs) to the National Crime Agency where required
• A dedicated Money Laundering Reporting Officer (MLRO) reporting to the board
• Annual independent audit of the AML programme

5. Sanctions and screening

Stored screens all merchants, beneficial owners and counterparties at onboarding, and on a continuous basis thereafter, against UK, EU, UN, OFAC and other relevant sanctions lists.

We do not establish or maintain relationships with any individual or entity that is sanctioned, or that is connected to a sanctioned regime. Where a sanctions match is identified after onboarding, we will freeze the relevant funds and report the match to HM Treasury’s Office of Financial Sanctions Implementation (OFSI) without delay.

6. Card scheme rules

By accepting card payments through Stored, you become an indirect participant in the Visa and Mastercard schemes. You agree to comply with the published Operating Rules of the relevant schemes as well as any additional acquirer requirements. The key obligations include:

• Displaying accepted card scheme marks at the point of sale
• Not imposing minimum or maximum transaction limits prohibited by the schemes
• Not surcharging cardholders in breach of the Payment Services Regulations 2017
• Honouring refund requests within reasonable timeframes
• Preserving transaction records for at least 18 months for dispute resolution

Where scheme rules and these obligations change, we will pass updates on to you through the merchant portal.

7. Data protection

Stored Payments Limited is registered with the Information Commissioner’s Office as a data controller under registration number ZB987654. Our processing activities are detailed in our Privacy Policy.

Where Stored acts as a data processor on behalf of a merchant (for example, when handling cardholder data on a transaction), we operate under a data processing agreement that complies with Article 28 of the UK GDPR.

8. Reporting concerns

If you suspect financial crime, fraud, a regulatory breach or any other compliance concern relating to Stored, please contact our compliance team in confidence:

• Compliance: compliance@joinstored.com
• MLRO: mlro@joinstored.com
• Whistleblowing line: 0800 080 4423 (24/7, anonymous)
• Post: Compliance Team, Stored Payments Limited, 4th Floor, 86–90 Paul Street, London EC2A 4NE

We treat all reports seriously and apply the protections set out in the Public Interest Disclosure Act 1998 to any worker raising a concern in good faith.