A retail company processes thousands of credit card transactions daily. Compliance auditors require that primary account numbers (PANs) not be stored in the company's databases or analytics systems, yet the marketing team still needs a consistent value to link repeat purchases from the same card without ever seeing the real card number. Which data protection method best satisfies both requirements?