Originally Posted by Bifta

It seems like a bit of a loophole, and I'm more than a little confused. Frank's in Canada, Frank owns the domain, does that mean that the personal data stored on members isn't covered by the DPA? A few members I'm sure can be personally identified through their email addresses and a whois, if that is the case, I'm confused about the privacy policy and why it mentions referring to the Information Commissioner or was that put in place in light of recent regulations surrounding terms & privacy details for web sites? Who is your companies data controller?