One small point - if it is your site, that's cool; if not then I'd strongly suggest you tell the client to 'seek legal advice' - you're not trained, experienced or insured sufficiently to offer this sort of support and it would be dangerous for you to do so.