Legal for a website to insist it keeps your card details?

fixit9660

I'm trying to book a service on a website but I can't without ticking the "Save my card for future payments" box. Is this legal please?

I really don't want them to keep the card details, I undertstand how unsafe this will probably be.

CliveOfIndia

I'm not sure on the legalities of it, but I personally wouldn't want to deal with any company that insisted on it.  Sure, it's handy to have the option if you buy stuff from them regularly, but I'd be wary of them making it compulsory.  Which website is it?  Have you checked out online reviews, registration with Companies House, ICO etc?  That can often give you a decent clue as to whether it's legit or not.

AstonSmith

They definitely can't save the CVV - the 3 digit security code on the back.

As a lay person I suspect it might be legal to save the PAN (16 digit card number) though, as long as it's safely stored. The card machine at my workplace prints a ticket with the PAN (and some other details) for every sale, which we keep for a limited period to defend against chargebacks.

Not letting you proceed without ticking the box is very poor practice, but I wonder if it's a glitch. I reckon a forced action would not have a tick box type choice, although it might be a ruse to claim it was opted in to.

TadleyBaggie

AstonSmith said:

They definitely can't save the CVV - the 3 digit security code on the back.

Well technically they can but it would be against the PCI standards (assuming the retailer is UK based at all). When audited (I have been involved in one) this would be quickly spotted.

Do they have an online Twitter account, complaining publicly may get them to fix it quickly.

born_again

If the are saving card details. Then they will process payments without the CVV. Just the same as Amazon do.

Remember you could go back & delete the card details.

DullGreyGuy

Or they will be using a continuous payment authority in which case the subsequent payments dont need the CVV, expiry date etc.

fixit9660 said:

I'm trying to book a service on a website but I can't without ticking the "Save my card for future payments" box. Is this legal please?

Naturally it is, they are free to put whatever conditions on sales as they want as long as its not discriminatory on race, gender, religion etc. You are equally free to decide you dont want to use a store that insists that you allow them to store card details. 

fixit9660

That's brilliant, thank you all for your prompt and helpful responses, much appreciated.

It is a website for a company in Devon, England. I've spoken to the company and have a satisfactory workaround.

MrFrugalFever

I have a CC for instances just like this with a limit of £250, if fraud is committed then it’s the CC companies problem not mine.

Glad you sorted a workaround.