In general one is allowed to store data for a limited time for specific purposes. A delivery address, for instance, is vital to deliver a package to.<p>You could probably even keep a names and addresses database so long as it was something you needed to keep in order to conduct business with the customer.<p>Routine data mining, asking for irrelevant info, selling it on to third parties, not so much.