Shop & donations

The intended flow

Payment is Stripe Connect, with ScotReach as the platform and Dare Remachinda as the connected account. At the moment of sale the platform takes its commission as a Stripe application fee on that transaction, and the balance settles into the show's own account. That structure matters: we never hold the client's money, which is the arrangement that would create a regulatory problem.

It is deliberately not a case of taking payment into a ScotReach account and paying the show later.

What is already built

• The whole buyer journey: catalogue, basket, quantities, delete-a-line, donation amounts, one payment step.
• checkout.php — server-side basket validation, commission calculation and the Stripe session call.
• Prices are re-read on the server, so a customer cannot change a price in their browser.
• No secret key is in any page: the Stripe key lives in drm_payment_config.php, one directory above the public web root, exactly as this estate already does for its SMTP credentials.

What has to happen before a single payment can be taken

1. Confirm Stripe Connect is enabled on the ScotReach account. It was not possible to confirm this from the credentials available: the Stripe integration we hold exposes no Connect surface at all, and the account is a Standard sole-trader account used for payment links. This is the first prerequisite and it is checked in the account's dashboard under Settings → Connect.
2. Onboard Dare Remachinda as a connected account and complete Stripe's identity and bank checks. That needs the show's own details and their agreement to Stripe's terms — it cannot be done from our side.
3. Agree the commission rate and who pays the Stripe fees. Client and platform decision, not ours.
4. Set the prices. All of them. Nothing sells until they exist.
5. Add the webhook so that a completed payment triggers fulfilment (download link, shipping, ticket email).