I work in this industry and I can confirm that there's fucking nothing ensuring the privacy of these transactions. Tens of thousands of people have full access to everyone's credit card history, and that's not counting unauthorized access and card skimmers.