Customer records maintained by your business may be subject to the provisions of the Data Protection Act 1998, which detail what type of information can be stored, and how it is stored, including access rights.
Details are available from the Information Commissioner's Office. (Tel: 01625 545745) The website will enable you to check whether your business must register with the Commissioner's Office.