Ive worked with ecommerce enough to not store my card anywhere.

Not storing it is not necessarily enough to protect you either, though. If their servers get compromised, it’s very easy for them to send that data elsewhere instead of/in addition to working normally.