You can, but you need to explicitly state in your data policy that this is what the data is used for and you can never use this data for any other purpose.