"This relationship generally fulfils the requirement of the first Data Protection Act principle - 1 Personal data shall be processed fairly and lawfully1 (1) In determining for the purposes of the first principle whether personal data are processed fairly, regard is to be had to the method by which they are obtained, including in particular whether any person from whom they are obtained is deceived" . . . .