It sounds like this is a problem where a CC gets rejected somehow? There are several checks in... you can validate the numbers when the customer first enters them to make sure they haven't put a typo into their number or used an expired card. Next, if you've set it to process CC's during checkout, it will fail on the review page if for some reason the payment processor declined the charge. At no point should they lose all their data.