I'd like to know why any business is allowed to keep customers' credit card numbers on file. After a transaction's completed and verified they have no need of it, all it does is allow the business to bill your credit card without your explicit consent, and leave that information open to hackers. A lot of businesses with online sales do that. Buy any of their product licenses online, and they'll automatically bill you for a resubscription a year later, then tell you afterwards. You can usually stop that, but you have to drill down through their website to find the place to turn off automatic renewals, and I've no doubt they still keep your credit card number. I don't think that's a legitimate business practice, I will decide in every instance what gets billed to my credit cards and when. That's why I abandoned McAfee's security products a few years ago, quite apart from it turning into bloated hogware.