Storing credit card details

[NRLtd]

Hi

Having worked in organisations dealing with business customers, credit cards rarely came up as a payment method. However, an ex colleague is planing on offering services to consumers and has asked me a question regarding customer credit card details - are they able to take a customers credit/debit card details, keep a record of them and use them for future payments against a payment plan?

Data protection bells went off in my head and poor security over credit cards is a contemporary topic. But online retailers with consumer accounts (like Amazon) do this as do hotels when you check in. Other people I've asked have told me their credit card merchant service said it was illegal, but I'd prefer something more concrete, is there specific legislation on this? I believe it may also be an issue of how the details are stored (security etc), in this instance they are planning on a written record and authorisation. Also, is there something that would need to be authorised by the merchant services provider, such as taking pay,nets without the customer present?

Thanks is advance

 

[StevensOnln1]

You need the agreement of your merchant account provider and a secure method of storing the card details. Stripe provides a good way of doing it if the card details are being captured online.

 

[DavidWH]

Some virtual terminals allow you to reuse a card from a previous transaction, using a cross reference number rather than the card number. All you need is the 3 digit security code from the back of the card to process it.

I'm fairly sure you shouldnt be keeping a record of their security number.

 

[NRLtd]

Hi

Thanks for the replies, their intention was to complete a form and keep it on file, which could then just blow away in the wind!!!

I'll pass on the messages, thanks again.