On 20 Sep 2010, at 16:40, Alex Beston wrote: > in the UK if you collect information, you have to register as a data controller: > http://www.ico.gov.uk/tools_and_resources/register_of_datacontrollers.aspx That's if you collect personal identifying information, but yes. You really do need to have a sound grasp of the Data Protection Act if you're operating in the UK - it's very, very difficult to avoid coming under its remit if you're running *any* kind of business with electronic records. Cheers Martin -- > Spammers: Send me email -> yumyum at easyweb.co.uk to train my filter > http://dspam.nuclearelephant.com/