I had to cancel a redemption booking recently. I was a bit surprised that it asked me for the number of the card used for payment as a part of the cancellation process.
While I'm (grudgingly) comfortable with those numbers being stored in the payments system (where I assume reasonable precautions are being taken) my experience of IT systems makes me less comfortable with it being held against all the bookings that I make.
Can anyone reassure me that all is well in this process, or do you all share my paranoia

?