The General Data Protection Regulation (GDPR) 2018 says B&FC can process your personal data for specific reasons. Where we do, the reason(s) were explained to you when we originally captured that information.