Will my data be handled under the Data Protection Act 1998 and not be passed on to any third parties without my express permission?