We store '&' in the database fields all the time, this is normal for this (at least I never heard an argument otherwise).
If you use only a line in an HTML page, you can just keep a safe version of HTML & , I suppose. I would suggest that storing '&' and avoiding it when you read it would be better (if in the future you need to use a string in a context other than HTML).
source share