It is very good to obtain explicit consent from customers before you make an attempt to collect their data or stor their their personal data. A clear commuication is needed on your privacy policy and data because this is how you can build transparency and trust with your customers. Implementing a secure payment will build trust.
