body: In a small business we have people who make orders over the phone (commonly known as card not present). Common practice is to directly input the details into the machine as the customer reads them out. 
  
  
  One of the chaps in the office is adamant that, they read out the details and I write them down and not input them in the machine, once the customer is done telling me the details I say that I will call them back with payment confirmation.
  
  
  I would then in my own time input the details into the card machine and process the payment and if all goes through, I would shred the paper immediatly and notify the customer.
  
  
  I don't feel comfortable writing the details down, I've told this chap many times. Is there a legal way I could tell him so he won't pressure me to do this in the future?
  
  
  
title: Is it legal to retain customer card details when making transactions over the phone (UK)?