Takeaway kept my card details?

MrLOL said:
re: steam, apple, play.com, amazon

are they just charging the card from outside the UK thus not bound by UK regulations ?

Steam and Apple are both american companies, play is based in the C.I. ...
Click to expand...

PCI-DSS is not a UK regulation. It is a payment card industry standard (hence PCI) and is applicable world wide.

It is possible to store credit card data, other than full magnetic stripe, CVV2 or PIN data which you are not allowed to store, as long as it's held in an application which meets PA-DSS (Payment Application Data Security Standard), if it's a third party application, or all the relevant security criteria are met in the case of in-house developed applications.

If you want more information on the standards and what is required then see the PCI Security Standards Council website.
 
MrLOL said:
re: steam, apple, play.com, amazon

are they just charging the card from outside the UK thus not bound by UK regulations ?

Steam and Apple are both american companies, play is based in the C.I. ...
Click to expand...

No, they're just putting the transaction through without using CCV. CCV is a validation the merchant *can* (but doesn't have to) use to verify you're the card holder. I assume some places just don't bother at all, an others just use it on the first transaction. Once you've validated it once you can be fairly sure a repeat transaction is genuine!!

A bit like how some places will only ship to the card holders address on the first order, but are less bothered about the shipping address with follow up orders.
 
daz said:
CVV should not be stored under any circumstances.
Click to expand...

Amazon must store my CVV because I ordered a load of stuff yeterday without getting my card out...
EDIT: Ignore, didnt really read the post above..


AFAIK, storing details is fine as long as there are proper security systems in place (IE not just written down on a scrap of paper or unpassworded system).
They have to ask first though.
 
When we take card payments over the phone at work, there is a form we have to fill in and when you get to the part about the security code it says that the security number must only be used for this transaction and cannot be saved for future reference.
 
You must log in or register to reply here.
Back
Top Bottom