Shop has email linked to debit card
Discussion
im sure this has been mentioned before but not 100%
My partner yesterday purchased a gift card from a well known high street fashion store. She buys a few things now and again from said store.
They always ask her name and email to send a copy of receipt (join the mailing list)
Yesterday when she paid she used contactless and the store assistant asked if her email address was "so and so" it was her correct email.
Clearly the store is using the debit card number to store customer information on their system. What do me doesn't sound overly secure.
Should they be doing this or is this against data protection ?
My partner yesterday purchased a gift card from a well known high street fashion store. She buys a few things now and again from said store.
They always ask her name and email to send a copy of receipt (join the mailing list)
Yesterday when she paid she used contactless and the store assistant asked if her email address was "so and so" it was her correct email.
Clearly the store is using the debit card number to store customer information on their system. What do me doesn't sound overly secure.
Should they be doing this or is this against data protection ?
Not without her having agreed to it.
However, they could just be using a cryptographic and salted hash of the card number, in which case it's secure to current standards. But, call me pessimistic, I wouldn't be surprised if they didn't go to the effort of implementing this given the data leaks that have been in the news this year
However, they could just be using a cryptographic and salted hash of the card number, in which case it's secure to current standards. But, call me pessimistic, I wouldn't be surprised if they didn't go to the effort of implementing this given the data leaks that have been in the news this year
Gassing Station | Finance | Top of Page | What's New | My Stuff