[3np]

Oh, your treatment of website visitor data seems in violation of the GDPR.

I see outgoing requests to multiple third parties (the chat widget looks like a source) without any form of notice, let alone the actually mandated informed and active consent prior to any of that.

Writing "By using this Site, you signify your acceptance of this Policy. If you do not agree to this Policy, please don't use our site. Your continued use of the Site will be deemed as your acceptance of those changes" does not fly. That this statement can only be found in a PDF link scurried away in the page footer does not make things better.

"Everyone's doing it and bigger guys are getting away with worse" is not a justification here either.