Many sites don't store your cc# even if you do use it direct through them. We only ever see the last four digits of cards that are run through our site. The credit card processor takes care of the rest.
Any site that does store your info should have it encrypted anyway. If they don't, then their credit card processor should not be doing business with them thanks to recent legislation.
Any site that does store your info should have it encrypted anyway. If they don't, then their credit card processor should not be doing business with them thanks to recent legislation.