Being vauge really doesn't help, but alas... I'm not a lawyer, but:

- You need to be in compliance with COPPA, which means you don't collect info from children under the age of thirteen without parental consent

- Your terms of service should protect you from whatever bad things happen if your groceries get lost

- You don't have to store anything else unless you're dealing with financially related things (banking, stocks, etc)