We are currently looking to use our database to store CC numbers for donations taken over the phone. Currently we use a separate form not linked to the database and destroy the numbers afterwards. If we start using the database to record numbers do we have to let donors know? The database is a secure password protected site.
