You see: you should have read the law before assuming that requesting this information from the user is legal. It had to be stored in one, single place. Therefo

You see: you should have read the law before assuming that requesting this information from the user is legal. It had to be stored in one, single place. Therefore answering this question shouldn't take more than 5 minutes, if you have anticipated GDPR.