If your business collects, uses or distributes personal data you need to check with the Information Commissioner’s Office (ICO) whether you need to be registered as a Data Controller.
The ICO definition of a Data Controller is as follows:
A person who determines the purposes for which, and the manner in which, personal information is to be processed. This may be an individual or an organisation and the processing may be carried out jointly or in common with other persons.
Notification is a statutory requirement and every organisation that processes personal information must notify the ICO, unless they are exempt. Failure to notify is a criminal offence.
You can call the ICO on 0303 123 1113 for further information or visit their website: ico.org.uk