It is always useful to register yourselves as a data protection registered company, there is a usually small charge for this.
Having a data protection statement on your website as a prompt to people would be good and is something we can help with, please raise a support ticket if you would like assistance with this.
Using the system you are covered under our Data Protection registration and we have security in place to safeguard your data.