Hi,
We are storing delivery addresses, emails etc.. in modx user accounts, is this ok? i.e are there any law against doing this and is there anyway to make it a bit more secure ?
I would say that storing them is fine as long as the areas they add them / view them / update them are secured via a SSH.
Not sure if it is actually law to do that but for the sake of $50 for a SSL it's always good practice and gives reassurance to the user that their data is safe.