What is a payment gateway?

Without a payment gateway, a website can show prices all day long but can’t actually take a penny. The gateway is the bit that turns “Add to basket” into money in your bank account. Think of it as the digital version of the card machine on a shop counter, the same job, just invisible and online.

A payment gateway is the technology that securely captures a customer’s card details on your website, encrypts them, and passes the payment between the customer, your business and the banks, confirming in seconds whether the payment went through.

What a payment gateway actually does

When a customer clicks “Pay”, a lot happens in a few seconds, all handled by the gateway:

1. Captures the card details on a secure, encrypted page.
2. Encrypts the data so it can’t be read if intercepted.
3. Sends it to the customer’s bank to check the card’s real and has funds.
4. Receives an approve or decline back from the bank.
5. Confirms the result to your website so the order can complete.

All of this is invisible to the customer. They just see “Payment successful”, or, if something’s wrong, a clear decline message.

Gateway vs merchant account vs processor

These three terms get mixed up constantly. Here’s the difference in plain English:

The good news: modern providers like Stripe, PayPal, Square and GoCardless roll all three into one signup. You no longer need a separate merchant account with your bank, which is what made taking online payments such a chore a decade ago.

What it costs

Payment gateways make money by taking a small cut of each sale. There’s rarely a setup fee for small businesses:

• Transaction fee: usually 1.5% to 3.5% of the sale.
• Fixed fee: a small flat charge per transaction, often 20p to 30p.
• Monthly fee: some providers charge one; the popular pay-as-you-go gateways don’t.

So a £50 sale might cost you around £1.20 to £2.00 in fees. For most small businesses that’s a fair price for the extra sales you capture by letting people pay instantly instead of chasing an invoice. For the full picture, see how to take payments on your website.

Security: PCI DSS and why it matters

Handling card data carries strict legal and security obligations under a standard called PCI DSS (Payment Card Industry Data Security Standard). Getting it wrong means fines and lost customer trust.

The smart move, and how all reputable gateways work, is that the card details are entered on the gateway’s secure page or pop-up, not stored on your website at all. That keeps the heavy compliance burden with the gateway, not you.

You’ll also need an SSL certificate so the connection itself is encrypted, the padlock in the browser bar. Without it, no gateway will let you go live, and customers won’t trust the checkout.

Choosing the right one

For most small businesses, the choice comes down to a few practical questions:

• Where are your customers? Some gateways suit UK and Europe better than others.
• One-off or recurring? Subscriptions and memberships need a gateway that supports them.
• What’s on your website? WordPress, Wix, Squarespace and Shopify each have favourites that plug in cleanly.
• Payout speed? Funds typically land in your bank account in 1 to 3 working days.

Picking the right gateway, wiring it into your checkout, and getting SSL and compliance right is the kind of thing that’s easy to get slightly wrong. We set up payments as part of a done-for-you website so your customers can pay in a couple of taps, see what’s included on the pricing page or get in touch to talk it through.

The next step is simple: decide what you’re selling, then make paying for it effortless. Every extra click in a checkout loses sales, so a clean, trusted payment flow is one of the highest-return things you can fix on your site.