In the era of automatic payment processing I can't think of any reason why a member of staff should have access to anything other than the last 4 digits, name and address for verifying it's the correct card