Takeaway kept my card details?

[Efour]

Ok im lazy cba to cook dinner so i phoned the local takeaway and ordered the healthy option with chilli sauce and salad.

Last time i ordered from them was July some time, a few pizzas, drinks 30 quids worth of crap, friends and family round, nom nom. Paid with my bank card.

Tonight i open my wallet no cash money, crap, so ill pay by card pay the 50p surcharge, whatever, im hungry. "Ok sir and your card number is 4000 xxxx 6352 xxxx ! expiry 10/15 security code 762" I was like....... w t f ? How the hell does he know this and why does he know this?

Are they allowed to keep these details? i assume its recorded and linked to the telephone system as the delivery address is associated to my incoming number too...

I feel a little bit violated and e-frauded, im going to scrub myself with my keyboard.

Well if my bank gets cleared out in the next week i know where to point the police to first

wheres my kebab......

 

[neil3k]

hmm

data protection laws anyone ?

 

[Cosimo]

wheres my kebab......

I'm enjoying it right now. Shall I tell you your pin.

Seriously that just doesn’t sound right to me.

 

[Bes]

It is a violation of the DPA for the company to hold your CCV I know that for sure. What they are doing is 100% NOT legal.

 

["andy"]

is it illegal ? probably

does it help you get food quicker ? yes

gotta decide what matters most to you

 

[Efour]

is it illegal ? probably

does it help you get food quicker ? yes

gotta decide what matters most to you

LOL this is what i thought first then i was like, hang on.....

 

[Energize]

Maybe the guy just remembered it from last time?

 

[Westyfield2]

IIRC keeping your main card details is fine as-long as they're holding it properly (DPA etc) and you agreed to it.

Keeping the CVV though? That's a big no no.

 

[arknor]

hes got a photographic memory

 

[Broken Hope]

IIRC keeping your main card details is fine as-long as they're holding it properly (DPA etc) and you agreed to it.

Keeping the CVV though? That's a big no no.

A fair few companies do it though, whenever I order using OcUK I always have to provide the CVV though the rest of the card details are stored. Yet if I order from some other sites it doesn't require any info from me at all and the order just goes through.

 

[orderoftheflame]

Very very illegal.

 

[Apok]

Maybe he just remembered you?

Not exactly the same thing but in my old house a guy from the takeaway recognised my voice whenever i called up, saved time telling him the orders and address.

 

[daz]

CVV should not be stored under any circumstances.

 

[Doughnut007]

its not as long as they comply with the DPA by keeping it secure ETC.

As far as im aware anyway

 

[Wicksta]

A fair few companies do it though, whenever I order using OcUK I always have to provide the CVV though the rest of the card details are stored. Yet if I order from some other sites it doesn't require any info from me at all and the order just goes through.

Which other sites out of interest?

 

[Westyfield2]

its not as long as they comply with the DPA by keeping it secure ETC.

As far as im aware anyway

Payment Card Industry Data Security Standard (DSS) says that "Sensitive authentication data must not be stored after authorization (even if encrypted)".

https://www.pcisecuritystandards.org/security_standards/download.html?id=pci_dss_v1-2.pdf

 

[Efour]

If i wanted to take this further who do i speak to ? I assume my local trading standards?

 

[Phil99]

Which other sites out of interest?

Amazon seem to store it \ don't seem to need it after you've used the card once

 

[Hamster]

Amazon seem to store it \ don't seem to need it after you've used the card once

I was about to post the same thing about amazon. Play.com also seem to have mine stored too.

 

[LukeTW]

Our local Chinese knows our address from the phone number but not bank details