@JoolsTurrall @neil_neilzone Of course, if they retain that info then GDPR also applies to that - depending on the legal basis, you've a right to request deletion etc and they must only retain for a reasonable time.