Wouldn't you need personal data to accept payments? Or maybe a broker (like Stripe) would store these and the end business just a reference to payment.
However if you have some direct business and do accept payments - by all means make it secure and transparent to your customers.
IANAL