Here is my story.....
My girlfriend paid for a surprise holiday before Xmas using her mums debit card. We have since decided to change to a better hotel after reading reviews and pay an extra amount to upgrade. This was all confirmed with the company and no mention of payment was mentioned. We assumed a bill would come through the post.
Anyway today it turns out that they have taken the extra money from her mums card again without asking if it was ok to do this. We had intended to pay the amount on my credit or debit card. This means they must have stored the card details on their system.
What are the legal implications of this if there are any??? I assumed that details could not be stored and any payments had to be authorised?
Hope somebody can offer some advice please.