Is it legal for waiters to surreptitiously record your card number while processing payment? Because that's what basically it is