Data Protection Act 1998

2The processing is necessary—E+W+S+N.I.

(a)for the performance of a contract to which the data subject is a party, or

(b)for the taking of steps at the request of the data subject with a view to entering into a contract.