Yes, you need to seek permission to use your customers’ information. This disclosure should be clearly set out in your Privacy Policy. You should seek legal advice in relation to data mining activities as there are strict privacy laws which will affect how you can use this information.