. "Once collected, the privacy preferences may be stored in a database or other storage medium, on the financial instrument, or both." . . .