in reply to collecting sensitive data

This is more a question than a statement, but this is definitely one of those wheels that shouldn't be reinvented.

Aren't there well-known, trusted, & secure people (sites) that you can hand your customer over to, that will deal with the sensitive details of CC transactions?

Examine what is said, not who speaks -- Silence betokens consent -- Love the truth but pardon error.
"Science is about questioning the status quo. Questioning authority".
In the absence of evidence, opinion is indistinguishable from prejudice.
RIP PCW

In Section Seekers of Perl Wisdom