Also interested to hear what Woo have to say.
One thing that will have to be in place is a checkbox where people have to OPT IN to agree to you being allowed to process their data.
This cannot be combined with other Terms and Conditions, it must be a checkbox of its own, which is unchecked by default.