A quick phone call to the property would be my first action. If it was a third party site then I would start with them. I would keep it non emotional and state clearly that you were not aware of it. It was not clearly pointed out and most importantly, That it was not an opt in which is typically required, you expect them to remove it and they need to change the way they are collecting it to be legally compliant. Let us know how it goes. worst case you can get your cc company involved.