The cardholder’s information should be retained in a secure area, using the guidelines [1] until no longer needed.
Links[1] http://www.uoguelph.ca/auditservices/resources/faq/ [2] https://www.uoguelph.ca/finance/category/category/revenue-control