<prompt> Human: I recently ordered from a local restaurant to have a work lunch catered and just received an invoice via email that contained all of my cards private information. Ive been helping to cater these luncheons for over a year now and no other restaurant has ever provided my full card information in a receipt or invoice. My gut is telling me this isnt normal and I really dont want my card information floating around. Is it appropriate to call them out? Apologies if this isnt the right subreddit for this. Just looking for some quick advice to keep my card secure.Edit: Thank you for the quick responses! They were all very helpful. I called the restaurant and let them know they shouldnt be including personal card details with their invoices. The guy was very receptive, apologized and thanked me for the feedback. He said they normally exclude the first 12 numbers of the card but that hed change the invoice to keep it from happening again. Ive already contacted my credit card company and a new card should be in my mailbox in 24 hours. Edit 2: After reading through everyones comments, I realized how dangerous it is for the company to continue operating like this. I decided against reporting them, as it seemed like an honest mistake and the food is great. But I did follow up via email to warn them about their PCI compliance and re-iterate the danger they are putting their customers in. Ill likely refrain from using the place in the foreseeable future, but hopefully this gets them back on the right track, as their food really is delicious.  <response>: Totally not normal. Call your CC and inquire about risk. NVM - I see that you already did that. 