Hmm. GDPR compliance for small business websites outside the EU with no budget? Might be easiest to just block access and display a message to EU IPs Other suggestions?