I'm putting this right at the top to make sure everyone sees it.  The GDPR is a new regulation from the EU and can affect even non-EU-based sites.  Take the time to check you are compliant.  And remember, if you aren't there are some pretty heinous fines.  So, it pays to look into it.