The Data Protection Act requires firms to ensure that data is held securely, this
includes data held electronically. We suggest that you consult with the web designers
in order to establish how secure the information provided by customers is at point of
entry, transmission, receipt and storage. Where any security risks are identified, you
should ensure that measures are put in place to address them. We would suggest you
refer to the ICO’s general GDPR guidance below and if you want any additional
guidance the ICO has a dedicated helpline for queries 0303 123 1113.

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/