The platform – EngageSuite – that is underlying the Actions has been through a Data Protection and Privacy Impact Assessment, in which GDPR compliance is one of the aspects assessed. It is coded with a very robust coding platform. You can find the data protection and privacy policy here.