In regards to the DPA, you can simply have it "opt-in". List how the data is stored and what it will be used for. Explain you take no responsibility for the security of the data, and that, by agreeing to submit extra details, they are agreeing to these T&C's.
DPA act sorted.
That's exactly how things like sailing clubs deal with the DPA (and the DPA acknowledges and accepts that).
DPA act sorted.
That's exactly how things like sailing clubs deal with the DPA (and the DPA acknowledges and accepts that).