Correct. From the DSS, 'Cardholder data includes: Primary Account Number (PAN), Cardholder Name, Expiration Date, Service Code'
If it were correct, and the card holder name needed to be secure, the company I worked at would not have received level 1 PCI compliance. The solution sends back the truncated card number, expiry date and the full card holder name.
Of course I'm assuming the banks wouldn't want you to make that data public, but you are allowed to store it without needing to be PCI compliant.
CVV code is another matter, under no circumstances are you allowed to store it, unless you're a level 1 compliant payment processor.
http://www.clickbank.com/press/clickbank-achieves-level-1-pa...