Hi Nick

The most straight forward way to do this is to create a custom user profile field  with restricted or no visibility depending on who should see the information.

There is also a setting enabling notes  that lets notes about users to be applied at a sit,e, course or personal level It also allows you to apply the same note to several selected users.