look into gdpr

[dmortazavi]

did a bit of research. as we do not operate in the EU and, more importantly, are not actively marketing to EU countries, we are likely not required to adhere to GDPR regulations