GDPR is one of the reasons why we consider working with companies based in the EU rather than those based in the US for sensitive topics (even though GDPR should cover EU citizens regardless of the website) but we know that companies based in the EU take it more seriously