These days the retailers don't (or shouldn't) store it. They store a token that the payment processor (e.g. Stripe) uses as a key to the card data that they store.
If you as a retailer have your checkout page set up properly, the actual card data never hits your server.
If you as a retailer have your checkout page set up properly, the actual card data never hits your server.