From December 2003, if you collect any information on visitors to your website, you must tell visitors. For example, if your website uses 'cookies' to track visitors, you must include a statement saying so. You must also give visitors the option to refuse to provide that information, or in the alternative to turn the cookie technology 'off'.
In addition, collecting personal data falls under the Data Protection Act 1998, and may require that you register a notification.
Set up a clear privacy policy - prominently available on your website - telling users how you will use their personal data before asking for it, and give them the option to opt out. Make visitors aware if your site uses cookies to collect user information. And only collect the data you need.
