What data will you be collecting? ........... Name, address, phone number and email!

How will you be storing the data?....... On my hosts servers, I'm guessing that's the safest place....

Who will have access to the data? Me & My Host I presume....possibly some staff in the future...

Will you be using SSL at all points where data is exchanged?....... How do I go about this, I presume I need to have an ssl when collecting there contact details? Do I need one anywhere else?

Is the server itself locked down fully? ie. no non-essential services running, ports open.........Don't know?