Abstract: A system and method allows a merchant to transact credit card payments with any payment service provider that supports client-side encryption with neither merchant nor payment service provider storing personal card holder data. Payment service providers register encryption keys with the tokenization service provider and receive an identifier that is stored by the merchant. Customers provide payment details on the merchant website, which are sent to the tokenization service provider which stores card holder data and returns a token to be stored by the merchant. When a payment transaction is initiated, the merchant retrieves encrypted card holder data from the tokenization service provider and sends it to the selected payment service provider along with other transaction details. Merchants may reuse tokens with any payment service provider without having to transfer personal card information.