Agreed Snoopy, and customers should not leave their cc info on any company databases if possible. Use an alternative form of payment, such as a single CC on PayPal (hardly a data protecting fortress, so leave just that one card) and always pay thru PP using that card.