As Portion of PCI data security criteria, physical cardholder info will have to also be saved within a protected area, like a locked place or storage region with restricted accessibility. Dealing with the entry of bank card info from shoppers; specifically, that sensitive card details are gathered and transmitted securely https://www.nathanlabsadvisory.com/blog/nathan/effective-gdpr-compliance-solutions-in-the-uae/