Right, so when you give your credit card info to a vendor, they are free to pass it on. They have no obligation to keep it private between agreed upon parties.