I'm putting this right at the top to make sure everyone sees it. The GDPR is a new regulation from the EU and can affect even non-EU-based sites. Take the time to check you are compliant. And remember, if you aren't there are some pretty heinous fines. So, it pays to look into it.