Yes, a company can keep your credit card on file without your permission if the company believes that it is necessary to protect your account or to comply with a legal order.