Storing user details

Hi,

We are storing delivery addresses, emails etc.. in modx user accounts, is this ok? i.e are there any law against doing this and is there anyway to make it a bit more secure ?

I would say that storing them is fine as long as the areas they add them / view them / update them are secured via a SSH.

Not sure if it is actually law to do that but for the sake of $50 for a SSL it's always good practice and gives reassurance to the user that their data is safe.