Andrew and Sharon Carne wrote from The Old Boathouse, Sennen Cove, Penzance, to say that their reaction to Streamline’s cost of compliance had been similar to Rachel Morrison’s (C-Store, October 26): “What a cheek!”

Andrew did some digging: “According to the Payment Card Industry Security Standards Council (PCI SSC), I should be able to conduct a self-assessment at no cost, given that I am a small business (one card terminal and a website using an ‘approved’ payment card processing firm, Sagepay). Streamline does not subscribe to that view and insists I use their online portal at £30, or an independent assessor at heaven knows how much.

“They have me by the short and curlies.”

He adds as an aside: “I was planning to change my online card processor as Sagepay has just put their prices up. Actinic, my web software supplier, provides an equally secure system at half the price but, guess what, they are not on the PCI SSC list of approved processors.

“To cap it all, I looked at how the PCI SSC came about. It is bankrolled by the likes of Amex, Visa, Mastercard and JCB. How did they get away with this?”

How, indeed.