I’ve had an email about updating my payment card details - is this legitimate?

Yes, it is. An automatic email is sent out when your card is close to expiring.