OneFor – Payment Gateway

OneFor – Payment Gateway connects your WooCommerce store to OneFor so customers can pay online after checkout.

After placing an order, customers are taken to a branded OneFor payment page where they can pay with a credit or debit card, scan a QR code with the OneFor app, or sign in with their OneFor account. Orders are updated automatically when OneFor sends a webhook notification after payment.

Features

• Single WooCommerce payment method at checkout
• Card, QR code, and OneFor sign-in on the OneFor payment page
• Staging and production API environments
• Dedicated admin settings page with connection test
• Webhook endpoint with HTTP Basic Auth for order status updates
• WooCommerce Checkout Blocks support
• Compatible with WooCommerce custom order tables (HPOS)
• EUR orders supported

Requirements

• WordPress 6.1 or higher
• WooCommerce 7.0 or higher
• PHP 7.4 or higher
• HTTPS on your store
• OneFor merchant API credentials
• Store currency set to EUR

External services

This plugin connects to OneFor payment services so customers can complete checkout payments and so your store can receive payment status updates.

What it is used for

• Creating payment sessions when a customer chooses OneFor at WooCommerce checkout
• Redirecting the customer to OneFor-hosted payment pages (card, QR code, or OneFor sign-in)
• Verifying API credentials from the plugin settings page (Test connection)
• Receiving server-to-server webhook notifications when OneFor reports a payment result
• Processing refunds through the OneFor API when initiated from WooCommerce

What data is sent, and when

• When a customer pays: After checkout, your store sends the WooCommerce order ID, order total, currency (EUR), return URL, and merchant order reference to the OneFor API (api.staging.app.onefor.com or api.app.onefor.com). If configured, your merchant account number is also sent. API requests are authenticated with the API username and password you enter in the plugin settings.
• When you click Test connection: Your API username and password are sent to the OneFor API to verify the connection.
• When a refund is processed: The payment session ID is sent to the OneFor API.
• On the OneFor payment pages: The customer completes payment on OneFor’s website or app. Any card, account, or identity data entered there is handled by OneFor, not stored by this plugin.
• Webhook (incoming): OneFor sends payment status updates to your WordPress site. The plugin does not send customer location or tracking data to OneFor.

This plugin does not collect GPS location or track site visitors. It only communicates with OneFor when payment-related actions occur.

OneFor Terms of Service and Privacy Policy

• Terms of Service: https://www.onefor.com/web/en/legalDocuments
• Privacy Policy: https://www.onefor.com/web/en/privacyPolicy
• Cookie policy: https://www.onefor.com/web/en/cookiePolicy
• Imprint: https://www.onefor.com/web/en/imprint
• Security & protection: https://www.onefor.com/web/en/security-posts
• Complaint policy: https://www.onefor.com/web/en/compliantPolicy