I don't think credit card data can be collected, but I could be wrong. If you give them any information directly ("what's your name/address/phone number") that's subject to collection and sale.
Of course that's a common practice at many businesses. That's why "loyalty" programs like Smith's Fresh Values and Maverik's Chrome card (just to name a few) exist. They give you a discount in exchange for selling your data for even more money.
Last Edit: Mar 30, 2015 0:11:13 GMT -6 by CAwasinNJ