GDPR Compliance
- TOs would probably need a contract with whoever hosts this (Debian).
- Need data removal (on request)
- Allow for data to be removed over time, given non-use
- Make bank detail saving for future use an option.
- A public data protection statement.