I would try to minimize holding data however there are numerous third party software that help mitigate certain data theft in a variety of cases such as using Stripe and Cloudflare.