Under the Data Protection Act, the processing of sensitive personal data should be transparent and advised how it is used. Your personal data is not stored, only used in an appropriate manner to maintain security