The cardholder’s information should be retained in a secure area, using the guidelines [1] until no longer needed.
Links[1] http://www.uoguelph.ca/auditservices/resources/faq/ [2] https://finance.uoguelph.ca/category/category/revenue-control