Actually its fine if you make the user explicitly give you permission to store it for them. If they &#x27;opt in&#x27; then its all good, and if they don&#x27;t well they will have to re-enter it every time they order but they will be ok with that.<p>It would be interesting to put some teeth in the &quot;no sharing&quot; rules about collected private information.