Last updated on 13 May 2026
Last updated on 13 May 2026
Effective Date: The AIB Merchant Services Standard Terms and Conditions are effective on 17 February 2026 for all Merchants.
Where you have indicated to us (whether on the Merchant Application or otherwise) that you wish to raise Mail/Telephone Transactions the following Terms and Conditions apply in addition to the General Terms and Conditions set out in Sections 1 through 17. In the event of any inconsistency, this Section 20 shall prevail.
Where you have indicated to us (whether on the Merchant Application or otherwise) that you wish to raise Electronic Commerce Transactions and we have agreed to this, or if you submit any Electronic Commerce Transactions without our written agreement, the following Terms and Conditions apply in addition to the General Terms and Conditions set out in Sections 1 through 17. In the event of any inconsistency, this Section 21 shall prevail to the extent of such inconsistency.
You acknowledge and agree that you shall:
3D Secure means the Three-Domain Secure protocol developed by Visa and for the Agreement includes "Verified by Visa" and "Mastercard SecureCode" and such other programmes notified to you by us from time to time;
Acquirer means AIB Merchant Services;
Agreement has the meaning set out in paragraph C of the Preface;
AIB Merchant Services means First Merchant Processing (Ireland) Designated Activity Company (FMPI). FMPI is registered as a designated activity company with the Companies Registration Office in Ireland under registered number 355871;
Applicable Law means any and all regional, national, local or other laws, statutes, regulations, rules, codes or ordinances enacted, adopted, issued or promulgated in any jurisdiction in the world by any court or regulator, to the extent applicable to us or you, our or your business, or our or your performance of obligations under this Agreement;
Authorisation means the process of referring a Transaction to the Authorisation Centre for approval for the Transaction to go ahead and to verify that, at the time of the Transaction, there is available credit on the relevant Card and that the Card has not been reported lost or stolen;
Authorisation Centre means the AIB Merchant Services credit card centre or such other centre as we may from time to time establish and notify to you;
Authorisation Code means a code number advised by the Issuer to us in respect of a particular Transaction during the course of Authorisation;
Banking Day means any day that is not a Saturday, Sunday or bank holiday in any part of Ireland;
Business means your business as a merchant as described in the Agreement or such other description as we may agree from time to time;
Card means all valid and current payment cards or other payment instrument approved by us and notified to you in writing from time to time;
Cardholder means an individual, company, firm or other body to whom a credit or debit Card has been issued and who is authorised to use that Card;
Cardholder's Account means an account in the name of the Cardholder, as identified in the Card Number;
Card Not Present or CNP means an order for services where the Card or the Cardholder is not physically present at your premises at the time of the Transaction, and includes Electronic Commerce Transactions and Mail/Telephone Transactions;
Card Number means the number displayed on a Card identifying the Cardholder's Account;
Chargeback means a demand by Issuer or a Scheme to be repaid a sum of money by us in respect of a Transaction which has been previously subject to Settlement and for which we have been paid by the relevant Scheme;
Contract Year means a period of twelve (12) months commencing on the date of deemed acceptance of the Agreement, thereafter, the period of twelve (12) months commencing on each anniversary of that date;
Controller has the meaning given in the GDPR;
Customer Data means all Personal Data relating to a Cardholder which is processed by either party in connection with the Agreement;
CVV2/CVC2 means the three digit security code printed on the reverse of Cards and intended to enhance the authentication of the Card;
Data Protection Laws means the GDPR and any other laws or regulations applicable to the Processing of Personal Data;
Data Subject has the meaning given in the GDPR;
Direct Debit means an instruction given by you to your bank to permit us to demand or initiate payment of sums due to us from your Nominated Bank Account in accordance with relevant Scheme Rules;
EEA means the European Economic Area;
Effective Date means the date on which the Agreement comes into force and being the date of submission to us by you of a duly completed and signed Merchant Application (to which these Terms and Conditions are appended);
Electronic Commerce means a non-face-to-face on-line Transaction using electronic media in which Card details are transmitted by a Cardholder to you via the internet, the extranet or any other public or private network;
Entity means any body corporate (irrespective of the state or country under the laws of which such body was incorporated), partnership, sole proprietorship, joint venture, or other form of organisation;
Event of Default means any event referred to in the Agreement which, if it were to occur, would entitle us to terminate the Agreement;
Fees & Charges Schedule means the schedule listing the fees and charges payable by you to us for the Merchant Services as issued and varied by us in our absolute discretion from time to time;
Gambling Transaction means a Transaction submitted by you to us for authorisation and clearing using Merchant Category Code (“MCC”) 7995 or such additional MCCs as may be designated by any Scheme from time to time with respect to games of chance or other gambling Transactions;
GDPR means Regulation (EU) 2016/679 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data;
Group means any holding company of ours, and any subsidiary of ours or of our holding company, and any affiliate of ours. For the purposes of this definition "subsidiary" and "holding company" shall have the meanings given to them in sections 7 and 8 respectively of the Irish Companies Act 2014 (as amended or superseded from time to time) including any subsidiary acquired after the date of the Agreement, and affiliate shall mean when used with reference to a specific person or entity, any person or entity that, directly or indirectly, or through one or more intermediaries, owns or controls, is owned or controlled by, or is under common ownership or common control with, such specified person or entity. As used herein “ownership” means (i) the legal and/or beneficial ownership of 40% or more of the equity securities of the person or entity, and/or; (ii) the right directly or indirectly, through one or more intermediaries, to appoint a majority of the board of directors of any such person or entity;
Intellectual Property Rights means any and all (i) patents and any divisions, reissues, reexaminations, substitutes, continuations, continuations-in-part, or extensions of patents, filed or pending applications for patents, (ii) or for any divisions, reissues, reexaminations, substitutes, continuations, continuations-in-part, or extensions of patents, (iii) trademarks, service marks, logos, trade dress, trade names, corporate names, Internet domain names and addresses and general use e-mail addresses, (iv) copyrights, whether registered or unregistered, and (v) any other rights in the nature of intellectual property (whether registered or unregistered) and all applications for the same, anywhere in the world, including trade secrets, know-how, confidential or proprietary information, database rights, rights against unfair competition and goodwill;
Interchange Fees means the percentage of the value of a Transaction or other amount charged by or payable to Issuers as interchange fees for a Transaction processed on your behalf under this Agreement pursuant to and as determined in accordance with the Scheme Rules.
Issuer means an organisation that issues Cards and whose name appears on the Card as the issuer of such Card or who enters into a contractual relationship with the Cardholder for the use of the Card;
Hyperwallet means PayPal (Europe) S.à r.l. et Cie, S.C.A. a limited liability partnership registered as number R.C.S. Luxembourg B 118 349 having a registered office at 22-24 Boulevard Royal, L-2449, Luxembourg;
Hyperwallet Account means the account in your name which you have advised PayPal in writing is to be debited and credited with funds due from and to you;
Hyperwallet FBO Account means the bank account in Hyperwallet’s name which you have advised AIB Merchant Services or, with your express authority, Hyperwallet has advised AIB Merchant Services in writing is to be debited and credited with funds due from and to you;
Losses means any and all claims, damages, demands, losses, costs, fines, penalties, liabilities and expenses (including reasonable legal fees and expenses) of an entity;
Marketplace has the meaning given to that term by the Schemes, from time to time;
Mastercard means Mastercard Inc, and any affiliate thereof and any of their successors and assigns;
MATCH means Mastercard's Member Alert to Control High-risk Merchants list;
Mail/Telephone Transaction means the processing of a Transaction arising from an order for goods and/or services made over the telephone or mail where the Card or the Cardholder is not physically present at the time of the Transaction. This often arises from mail or telephone requests for goods and/or services;
Merchant or you means the merchant (i.e. you) who has entered into the Agreement, and “your” shall be interpreted accordingly;
Merchant Application means the merchant application completed and delivered by a person or entity who wishes to receive Merchant Services on the terms of the Agreement;
Merchant Information means any information in relation to you including all of your Personal Data;
Merchant Services means the Transaction Authorisation and Settlement and related services to be provided by us to you pursuant to the Agreement;
Merchant Systems means any hardware or software used by you to access website(s) operated or maintained by us through which Transactions are submitted for processing, and all other associated systems;
Nominated Bank Account means the bank account in your name which you have advised AIB Merchant Services in writing is to be debited and credited with funds due from and to you and for which you have provided a Direct Debit authority;
Payment Card Industry Data means Security Standards or PCI DSS means a set of comprehensive requirements to minimise the potential for Card and Cardholder data to be compromised and used fraudulently, released from time to time by the PCI Security Standards Council;
PayPal means PayPal (Europe) Sarl & Cie, SCA, a company incorporated under the laws of Luxembourg with register number R.C.S. Luxembourg B 118 349 having a registered office at 22-24 Boulevard Royal, L-2449, Luxembourg; and PayPal PTE. LTD. a company incorporated under the laws of Singapore with registered number 200509725E and having a registered office at 5 Temasek Boulevard, #09-01 Suntec Tower Five, Singapore 038985;
PayPal FBO Account means the bank account in PayPal’s name which you have advised AIB Merchant Services or, with your express authority, PayPal has advised AIB Merchant Services in writing is to be debited and credited with funds due from and to you;
Payment Service Provider (PSP) means the provider of a service to enable Card payment details to be made securely over the internet;
Personal Data has the meaning given in the GDPR;
PIN means personal identification number. This is the secret number used by Cardholders with chip Cards to authorise Transactions to be debited to their account;
Processor has the meaning given in the GDPR;
Processing has the meaning given in the GDPR;
PSP Agreement means the agreement with a Payment Service Provider for the provision of certain services to you;
Recurring Transaction means a Transaction which the Cardholder has agreed can be debited to their Cardholder's Account at agreed intervals or on agreed dates. The Transaction can be for a specific amount or for an amount due to Merchant for an ongoing service or provision of goods;
Refund means where you agree to make a refund to the Cardholder's Card of the whole or part of any sum authorised by a Cardholder to be debited to their Cardholder's Account;
Regulated Card means any Card that is not an Unregulated Card;
Relationship Agreement means the agreement between you and PayPal for the provision of services;
Scheme Fees means the assessment and other fees charged by a Scheme for or in respect of processing under this Agreement pursuant to and as reasonably determined by AIBMS on a periodic basis in accordance with the Scheme Rules;
Schemes means Visa Mastercard, Maestro, and such other schemes notified to you by AIB Merchant Services from time to time.
Scheme Rules means the rules and operating instructions issued by particular Schemes from time to time;
Settlement means the payment of amounts to be reimbursed by us to you or by you to us under the Agreement;
Set-up Fee means the once-off set-up fee shown in the Fees and Charges Schedule payable by you to us;
Software means all protocols, software components and other interfaces and software relating to any gateway services provided by us to you or accessed by you pursuant to the Agreement, and any and all updates;
Statement means the regular advice provided to you advising of the Transactions performed by you and the charges due by you;
Sub-Processor means any Processor engaged by us to process the Customer Data;
Terminal means an electronic device used to capture Card details, for obtaining Authorisations and submitting Transactions to a Card Transaction acquirer; the term also includes any PIN entry device (PED) if it is a separate device;
Termination means the termination of the Agreement by any of the parties in accordance with Section 15;
Termination Events means each of the events set out in Sections 15 (c), 15(d) or 15 (f) (inclusive);
Transaction means an act between the Cardholder and you regarding the purchase or return of goods and/or services where the Cardholder uses its Card to pay for goods and/or services that results in the generation of a Transaction Record for the provision of goods and/or services and/or Refunds;
Transaction Data means all data relating to Transactions;
Transaction Record means the particulars of a Transaction required from you by us in order to process a Transaction in the form as prescribed by us;
Unregulated Card means any Card that is either a commercial card (as defined in Regulation (EU) 2015/751) or a Card which is issued by a Card Issuer located outside the EEA;
Visa means Visa International, Inc; and
VMAs means Visa Merchant Alert System.
This Notice applies to Personal Data of staff, employees, principals and contractors of Merchants (“you” or “your”). This Notice describes how AIB Merchant Services (the trading name of First Merchant Processing (Ireland) Designated Activity Company) (“we”, “us”, or “our”) may use information provided to us about you either by the Merchant (“your company” or “your employer”) or by you directly, for example if you are a sole trader and not an employee. Personal Data means any information that relates to an identified or identifiable individual. This Notice also describes your data protection rights, including a right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section G of this Privacy Notice below. We reserve the right to modify this Privacy Notice at any time in the manner provided in our agreement with you or your company, and subject to such notice periods as we may operate from time to time.
AIB Merchant Services will be the Controller of Personal Data in relation to the Merchant Services.
To contact us in relation to our use of your Personal Data or to exercise your rights, you can write to us at 10 Hanover Quay, Dublin Docklands, Dublin 2, D02 A3W8, Ireland or by email on DPO@aibms.com.
We collect Personal Data both directly from you and from your employer. The information we ask you or your employer to provide or that we collect under our agreement with you or your company includes:
From time to time third parties that you have a relationship with may, with your consent, share your name, address and other contact information with us in order for us to market our products and services to you.
We and our service providers may collect information about you that is publicly available, including by searching publicly accessible government lists of restricted or sanctioned persons (such as the Specially Designated Nationals And Blocked Persons List), public records databases (such as company registries and regulatory filings), and by searching media and the internet.
We may link information about you between accounts, including your arrangements and any account(s) you may guarantee, and between accounts and the other products and services you may have with AIB Merchant Services, its holding company, and its subsidiaries, and its holding company’s subsidiaries, and their associated companies from time to time. Depending on the products and services the Merchant receives from us, we may also link information about you with information about other companies.
Providing our products and services, which includes:
Verifying your identity, credit checking, credit scoring and debt detection
When considering a request, proposal, application or administering our agreement with you or your company, managing your account(s) or making decisions regarding credit, including whether to make credit available or to continue or to extend existing credit to Merchants, we carry out, (i) searches for the purpose of verifying your identity, and/or (ii) credit searches in relation to you or your company with one or more licensed credit reference agencies, and/or (iii) credit scoring. We use automated decision making systems to help us to make fair and reasonable decisions as to whether to contract with the Merchant, particularly considering your and the Merchant’s financial security and status. You can ask us to reconsider any decision we take and to express your point of view about the decision. However, should the results of any credit scoring, security check or similar processing be too low, we are unlikely to conclude a contract with the Merchant. We also use Personal Data we hold for debt tracing and the prevention of money laundering as well as the management of the Merchant’s arrangements.
Developing scoring criteria
We also use some of your Personal Data to develop standard scoring criteria to assist us in assessing future Merchant Applications and in reviewing your company’s facility.
For research, development and analytics
We use the information we collect for our own research and development purposes, which include:
Complying with law
We use your Personal Data as we believe necessary or appropriate to comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.
Compliance, fraud prevention and safety
We use your Personal Data as we believe necessary or appropriate to (a) enforce the terms and conditions that govern our products and services; (b) protect our rights, privacy, safety or property, and/or that of you or others; and (c) protect, investigate and deter against fraudulent, harmful, unauthorised, unethical or illegal activity.
To create anonymous data
We may create anonymous data from your Personal Data. We make Personal Data into anonymous data by excluding information that makes the data personally identifiable to you, and use that anonymous data for our lawful business purposes.
| Processing purpose Details regarding each processing purpose listed below are provided in the paragraph above this table | Legal Basis |
| Providing our products and services | Processing is necessary to perform the contract governing our provision of the products or services or to take steps that you request prior to signing up for the Services. |
| These processing activities constitute our legitimate interests. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Data for our legitimate interests. We do not use your Personal Data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). |
| Compliance, debt detection, prevention of money laundering fraud prevention, and safety (where we have a legal obligation) and otherwise complying with law | Processing is necessary to comply with our legal obligations |
To ensure we carry out your instructions accurately, to help improve our services and in the interests of security, we monitor and/or record your telephone calls with us.
We employ third party companies and individuals to administer and provide services on our behalf (such as companies that provide software and call centre services.
To prevent, detect or respond to fraud or money laundering, or to manage our or our clients' risk, we may pass information to third party credit reference, fraud protection, risk management or identity verification organisations, in accordance with law, and to ensure we comply with contractual, legal or regulatory requirements. If you give us false or inaccurate information and we suspect fraud, we will record this and will pass such information to such other financial and other organisations.
We give details of your company’s arrangements and how you conduct them to collection agencies, other financial institutions, our legal advisers, law enforcement and to applicable regulatory entities, where appropriate. In particular, we may give those entities details of non-payment where:
We will report to the Visa VMAS and MasterCard MATCH listings the Merchant’s business name and principals, as required under their rules.
In addition, subject to any banking regulations and the law, we or our agents may disclose all information you or your employer provide to us or our agents to:
We transfer your Personal Data within our group of companies, including outside of the European Economic Area (“the EEA”). Whenever we transfer your Personal Data out of the EEA within our group to countries not deemed by the European Commission to provide an adequate level of protection for Personal Data, the transfer will be based on our Binding Corporate Rules, a copy of which can be found at:
https://merchants.fiserv.com/en-europe/privacy/binding-corporate-rules/?utm_source=firstdataus.
When we transfer Personal Data outside of the EEA to third parties in countries not deemed by the European Commission to provide an adequate level of protection for Personal Data, the transfer will be made pursuant to:
Please contact us if you would like to receive further information on the specific mechanism used by us when transferring your Personal Data out of the EEA.
We retain Personal Data for as long as necessary to (a) provide the service under our agreement with you or your company; (b) comply with legal obligations; (c) resolve disputes; and (d) enforce the terms of our agreement with you or your company.
N/A
Under certain circumstances, you have rights under data protection laws in relation to your Personal Data. You may ask us to take the following actions regarding Personal Data that we hold:
You can submit requests to exercise these rights, and to ask us to reconsider automated decisions, by contacting AIB Merchant Services at our registered office: 10 Hanover Quay, Dublin Docklands, Dublin 2, D02 A3W8, Ireland or by email on DPO@aibms.com. We may need to request specific information from you to help us confirm your identity and ensure you are entitled to exercise a right in respect of your Personal Data, for example, a merchant identification number or account number. This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
There may be legal or other reasons why we cannot, or are not obliged to, fulfil a request to exercise your rights. We will use available lawful exemptions to your individual rights to the extent appropriate. If we decline your request, we will tell you why, subject to legal restrictions.
You will not have to pay a fee to exercise any of your rights relating to your Personal Data. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We will respond to all legitimate requests promptly and, in any event, within any timeframes prescribed by applicable law. In general, we must respond to queries within one month from the receipt of the request, so it is important that requests are identified and sent to us as soon as possible. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated. Any transmission of your Personal Data will be handled in a secure manner.
Where you have indicated to us (whether on the Merchant Application or otherwise) that you wish to raise Gambling Transactions and we have agreed to this, the following paragraphs apply in addition to the rest of these Terms and Conditions. In the event of any inconsistency with any other provisions of these Terms and Conditions, this Schedule 2 shall prevail to the extent of any such inconsistency.
In undertaking Gambling Transactions, you agree to the following:
In this Schedule 2, the following words shall have the following meanings unless the context otherwise requires:
| BIN Blocked or BIN Block or Bin Blocking | means full and complete blocking of bank identification number(s) (BIN)(s) as we may notify you in writing from time to time; |
| Gambling Merchant | means a Merchant authorised by us to accept Gambling Transactions; |
| MasterCard Gambling Payment Transaction | means the disbursement of gambling winnings by you to the same MasterCard Card used in the initial Gambling Transaction to place the gambling stake with you; |
| Other Requisite BIN Block Territories | means any countries or states that we may notify to you in writing from time to time who or which must be BIN Blocked by you in accordance with the requirements of this Schedule 2; and |
| Visa Original Credit | means the disbursement of gambling winnings by you to the same Visa Card used in the initial Gambling Transaction to place the gambling stake with you. |
Unless otherwise required by relevant Scheme Rules, you agree that:
This Commercial Entity User Agreement for card processing services (“Commercial Entity Agreement” or “CEA”) is provided to all PayPal Braintree Users that are required to enter into a direct agreement with the Member in accordance with Network Rules (defined below) and that have a PayPal Braintree Payment Services Agreement. Each such entity or person receiving this document is hereby referred to as “Merchant”.
This CEA constitutes Merchant’s direct legally binding contract for card processing services between (1) Merchant; (2) Member (as defined below).
Member may terminate its provision of card processing services and enforce or rely on any term or provision of the Merchant's PayPal Braintree Payment Services Agreement ("PSA") expressed for the benefit of PayPal Braintree, all of which are incorporated in this CEA by reference. In this CEA, "we", "us" and "our" refers to Member and “you” and “your” to Merchant.
Any reference to the PSA means the PayPal Braintree Payment Services Agreement made between PayPal Braintree and Merchant and the services supplied under the PSA as “PayPal Braintree Services”.
For the purpose of this CEA, "Member " shall mean (a) First Data Europe Limited, a limited company registered in England and Wales (registration number 02012925) with its registered office at Janus House JH/1/D, Endeavour Drive, Basildon, Essex, SS14 3WF, United Kingdom (FDEL) if Merchant is based in the United Kingdom; and (b) First Merchant Processing (Ireland) DAC, a limited company registered in Ireland (registration number 355871) with offices at 10 Hanover Quay, Dublin Docklands, Dublin, D02 A3W8, Ireland (FMPI) if Merchant is based in the European Economic Area (EEA).
By accepting the Commercial Entity Agreement, Merchant agrees to the terms and conditions of this CEA and any documents incorporated by reference. Merchant further agrees that this CEA forms a legally binding contract between Merchant and Member. Any rights not expressly granted herein are reserved by Member. Descriptions of material amendments to this CEA will be provided as applicable. Any capitalised terms used in this CEA and not otherwise defined shall have the meanings set forth in the PSA.
| Data Protection Law |
|
| GDPR | means the General Data Protection Regulation (Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, of the European Parliament and of the Council of 27 April 2016) (as amended from time to time). |
| Merchant Personal Data | means all personal data relating to a cardholder processed by either party in connection with this Agreement. |
In addition to the terms defined in Clause 16.6, for the purposes of this Agreement, "personal data", "controller", "processing" and "data subject", shall have the meanings ascribed to them under GDPR.
Important Member Responsibilities:
Important Merchant Responsibilities: