Key Legal Considerations for Handling User Data in eCommerce