Hello SuziQ54,
Thank you for the question. I would be concerned about an email asking for personal information as well. The iTunes Store will not as you for personal information:
The iTunes Store will never ask you to provide personal information or sensitive account information (such as passwords or credit card numbers) via email.
Email messages that contain attachments or links to non-Apple websites are from sources other than Apple, although they may appear to be from the iTunes Store. Most often, these attachments are malicious and should not be opened. You should never enter your Apple account information on any non-Apple website. Apple websites that require Account information have apple.com, such as http://store.apple.com, or iforgot.apple.com (with the exception being iCloud.com).
Identifying legitimate emails from the iTunes Store
http://support.apple.com/kb/HT2075
I recommend reviewing the article above and the additional links below for more information on identifying phishing emails and reporting them:
Phishing & Other Suspicious Emails
http://www.apple.com/legal/more-resources/phishing/
Identifying fraudulent "phishing" email
http://support.apple.com/kb/HT4933
Additionally, this article has information about keeping your Apple ID secure:
Apple ID: Security and your Apple ID
http://support.apple.com/kb/ht4232
Thank you for using Apple Support Communities.
Best,
Sheila M.