From the hours of having to sit through GDPR sessions at work these is bubbles, they can store your payment details and still comply with GDPR. As someone above said it's a way of stopping something they didn't fancy running anymore and deflecting the blame.