help needed desperately

[happy_face]

Yesterday I rang up a company to buy some books and the woman on the phone took my credit card details and said she would pass them on to the guy in charge of orders. She was even kind enough to say I should give her my credit card details over the phone as that was safer but I should email the order.
So this morning I receive an email from the guy saying he needs to know whether the card is Mastercard or Visa and he needs the security code on the reverse on the card.
I scroll down in the email and to my horror find that the woman I initially spoke to has forwarded my credit card details to him in an email and not only that he forwarded the email to me. Had I not checked I could've gone right ahead and givent he rest of the info. So I rung the guy and said to him I was extremely unhappy about the fact that my credit card details were disclosed in insecure emails. He said unless the customer advised they wanted their details to be kept confidential that was what they did. I was fuming. I then went on to give him the details he needed over the phone and he asked if I was sure I was happy to do so over the phone and I told him not to be fecicious.
I rang up the company a bit later to get the name of a manager so I could write a complaint when I found out the guy I had dealt with is the manager. What do I do in a situation like that? Surely there must be some laws that retailers have to adhere to with regards to customers payment details. Does anyone know of any websites where such things may be explained so I could email and quote?
Any help is much appreciated.
I know I should've just said they could forget about the books, but they're the only company doing them and I need them

[themas]

This manager seems not to have a clue about security of information, so:-

1. If they are a limited company you can find out the names of directors (for a small fee) from the Companies House website, and then write a formal complaint letter to them.

2. Even if they are not a limited co. they must be owned by someone - presumably not the manager. If you can find out who, write to them.

3. The credit card companies ought to be interested in taking this up with them, as it is a practice that could easily lead to card fraud. You could contact the fraud prevention people at your credit card company and ask if they can do anything about it. (You ought to contact them anyway, just in case your details have been mis-appropriated as a result of this.)

[Sasha13]

I was under the impression that the only details company's were not allowed to record (unless the system that the details were being recorded on had a particular level of encryption) was the security code. In this respect the company didn't break any laws (if I am right), although what they did certainly wasn't very clever. At the end of the day, unless they had the security code as well as card no. and exp date, someone would have a hard job using your card fraudulently - I thought?? I may be wrong though!

[themas]

I don't know what the legal position is, but I have certainly made many purchases by phone and online without the security code being asked for. So what they did is foolhardy and potentially dangerous. Everyone should realise that e-mails are not a secure method of communication.

[WendyS]

I think you should write a formal letter of complaint to the Managing Director of the company with whom you dealt if you can track down their address.
I would also send a copy of this to the Fraud Department of your credit card company. I know a fraud hasn't been committed, but hopefully they will then be able to put a closer watch on your account in case this action has made it more vulnerable and perhaps give the company some advice on the way they are handling their customers' credit card transactions..