Please see the Spoint's GDPR policy: GDPR Policy