"If the application is ultimately approved, other types of information may be collected from the applicant/cardholder at a later time, and the various tables of the database may be more fully populated." . . . .