Is a telemarketing or Internet based company legally allowed to retain credit card information that was obtained through a sale? Which law(s) govern this issue? Any assistance would be appreciated. Thanks, Steve