A hotel belonging to a large chain (400 hotels in 60 countries) has just requested me to send my credit card details via standard (unsecured) email.
I have negotiated a deal for accommodation with them, via email, outside of the standard packages available on their website, but now I need to pay their booking fee. They don't have the facility to enter an arbitrary secure payment via their website.
The issue I have is that I am convinced that whatever method I use, the hotel will probably just email it in plain text internally to some payment clerk or whatever to keep on file. So is it better to just tell them over the telephone and hope for the best?