I think @Barclays might struggle to explain why their login page runs 3rd party javascript from a company based in a non-EU country. It may not be a payment page, but it *is* the gateway to the user's bank accounts