Is it safe to keep a client's card on file for future appointments?

Updated October 2026 · How we answer

How card storage usually works

Most booking tools do not store the full card number themselves. They save a token from a payment processor that can charge the card later. This keeps sensitive details out of your own files and makes the setup safer for you and your clients.

Before you save a card, tell the client what it is for and how to remove it. Consent and recurring-charge rules vary by state and country, so check what applies where you work.

Use a processor-backed feature, not a notes field. Get written or clicked consent. Explain when the card may be charged. Let clients remove their card easily.

What to avoid

Never copy card numbers into a paper log or a shared spreadsheet. Those copies are hard to protect and are a common source of fraud complaints. If a tool asks you to type the full number into a free text box, look for a different option.

Ask the client to confirm the card before the appointment instead of at the chair. That gives both of you a chance to fix an expired card without an awkward moment during checkout.

From our shops