CiviCRM Community Forums (archive)

Not sure how you process the credit cards - do you mean you want to collect the credit card number and then manually process it?

You can collect the credit card as a custom data field. It's highly insecure but so is e-mailing credit card numbers.

You need to be aware that if you store credit card numbers or collect them in an insecure manner the bank may hold you liable for any security breaches. I would suggest you are better reviewing your processes.

If people receive credit cards by e-mail do they have a rock solid process for ensuring they are completely deleted?

It sounds like the information is being collected in a secure manner but where is it stored and for how long? If it is in people's e-mails - when and how thoroughly is it being purged from there. If it is in CiviCRM then the issue is primarily the security of your webserver.

It is always important to keep your web server secure and the steps don't change. (firewalls, permissions etc) It's just that many of us don't want the added liability of having credit card details that could be exposed if the site is hacked.