Selling direct, and what each route to the sale actually costs. Restaurant online ordering on your own site →
Visa's enhanced evidence route needs two earlier undisputed charges on the same card, so a first-time diner's deposit fails it on day one. The ordinary evidence route stays open.
The ordering button on a restaurant's Google result can point at a page the owner never chose. Provider-supplied links arrive automatically, carrying a commission nobody priced.
Reimbursement covers individuals, microenterprises and charities. On ONS bands two in five licensed restaurants are outside the ten-person limb — excluded from one route, not all.
Charged twice by its own checkout, a restaurant reaches for the fourteen-day refund clock. That clock belongs to cancellation, and the duty that does reach it sets no deadline.
The posting duty on a hygiene notice stops at the door; whether it reaches the ordering page behind it is untested, and getting it wrong risks a second offence.
Repackaging draught beer for takeaway leaves an unpaid duty difference and a forfeiture risk an ordinary pint at the bar never triggers — and the rate has moved twice since 2023.
A checkout takes payment for a bottle of wine. The age check lands thirty minutes later on whoever carries the bag, and so does the risk.
The website shows one number and the bill shows another, and that mismatch turns into a dispute at the table before any regulator has settled the rule.
A confirmation carrying only a total leaves the restaurant arguing from memory when a guest disputes the charge, and saying nothing at all about cancellation is itself a failure.
Four or five third-party scripts nobody chose can read the card fields on a restaurant's own checkout page, and the exposure can run undetected before anything looks wrong.
The statutory duty is narrower than most restaurants fear and the document shorter, though HMRC's guidance asks for more, and the rate on each line is where the exposure sits.
A credit note, an administration fee and a refund left to the month-end run are three separate breaches of one regulation, on a clock that started the day the message arrived.
