. . . . . . "The types of personal data that may be collected include name, address, e-mail address, telephone number, fax number and financial information, such as credit card or bank account numbers." .