You need to look into PCI compliance. I don't believe you should store credit card information at all.