Unauthorised card use

[shamwari]

I paid my daughters car insurance premium last December because she was struggling.

 

This week I noticed a payment on my bank account to the same company.

 

I did not authorise this payment.

 

My daughter is currently out of the country,

and although that figure may be owed I thought it illegal for any company to retain card details.

 

Am I correct in this belief?

 

If so who do I take this illegal payment up with,

 

my bank or directly with the company involved?

[dx100uk]

is this a monthly paid policy?

over say 12mts?

 

if they couldn't collect from your daughters account.

then they'd use the alternate details given.

 

dx

[shamwari]

Yes it is a monthly paid car insurance policy.

 

I looked up the basic card holder data guidelines for merchants last night

as soon as I saw this payment it says

Do Not Store card holder Data unless absolutely necessary.

 

I make a monthly payment on 3 accounts over the phone

and these people ask for my details for every payment, all during one single call.

 

As far as I am concerned my card details were not Given or authorised as an alternative guarantor type source of payment,

but for this one off payment.

 

In the time that has passed the card holder might have died

or divorced or indeed might not have been a close friend or family member.

 

What is to stop this happening in the future randomly

whenever they feel the need by anyone that holds my details?

[green_and_mean]

Its impossible to give advice without seeing what the policy and payment agreement says.

[JoeyJoeC]

It's not illegal for company to hold card data as long as they have PCI compliance (Payment Card Industry). It also depends on the policy and agreements if they mention they will hold details.

[shamwari]

What agreement?

The agreement between the policy holder and the insurance company?

I have no knowledge of that, I have no agreement with them, all I agreed to was to make a one off payment as far as I am concerned.

As far as I know, when I have done similar payments, it has meant I must agree to the use of my card for that payment during the phone call.

So different companies can use different rules about my personal bank card details?