It definitely doesn't sound very GDPR compliantÂ. It’s dated before GDPR so clearly needs an update.