If its only a fingerprint, then I agree with Le_Petit_Lapin.
I think I would prefer my fingerprint to be stored in India than in the UK. It isn't like UK companies have a great record of securing data properly, and Indian technology companies are pretty good these days.
Even if someone did get hold of your fingerprint, what are they going to do with it? The only thing I can imagine someone doing with it is using it to "frame" you in some way, but then if someone wanted your fingerprint that much they could just follow you for a while and take it off a glass or door handle that you have touched. . .
I don't know about the legal aspects, but there are many companies that do it (and quite reasonably so whenever security is important), so I would guess its within their rights.
Finally, you should check what the exact format of the data is. It may well be that they store enough information such that your fingerprint can be verified, but not enough such that the fingerprint can be reconstructed.