Thread: Company has my card details on File, is this allowed?

I bought some tickets for a concert a while back and needed a couple more as more people are now going, when I phoned the ticket company and asked for 2 more tickets they were able to go into my original booking and add 2 onto this, all they asked my for was my CV2 number on the back of my card.

My original booking was over the internet, are they allowed to hold my card details on file so any of their employees can access them? I thought once you booked and the money was taken the card details were deleted.

I'm in the U.S. so things might be different here. My card info. is on file with who knows how many companies... Amazon, the power co., internet and phone providers, drugstore.com, 1800petmeds...whatever. Never had a problem.

If it's a majore CC with a reputable bank you're covered for any fraud, so why worry about it. Sounds like this tix co. made things real convenient for you.

Originally Posted by jeffysdad

I'm in the U.S. so things might be different here. My card info. is on file with who knows how many companies... Amazon, the power co., internet and phone providers, drugstore.com, 1800petmeds...whatever. Never had a problem.

If it's a majore CC with a reputable bank you're covered for any fraud, so why worry about it. Sounds like this tix co. made things real convenient for you.

I have a merchant account and accept credit cards in a business I have. In general card information can be kept on file as long as you abide by certain security rules. If they did not make a fraudulent charge to your card then it is probably allowed.

Many businesses store credit card numbers for auditing purposes even when they are "not supposed to." There is a legitimate need to have documentation of transactions, in fact there is a legal requirement to maintain this, so even if there are restrictions they probably would not be enforcable.

Think of it this way: when you charge something to your card the merchant has every right to collect information that can eventually be used as evidence if they need to sue you because you failed to pay. Even if there was a rule by someone that restricted keeping that information it likely would not be upheld because it would deny the business of their legal right to due process. BUT...they do have an obligation to keep the data secure. If it were stolen from them then they would be responsible for any damages you suffer.