Yes, we have a process in place which has been reviewed and approved by our external legal advisor as being GDPR compliant.