If your privacy policy is included in your terms of use, consider no matter if you must adjust to the GDPR, a regulation that requires you to obtain consent ahead of processing specific personal knowledge from EU citizens. Being GDPR compliant, you may have to utilize a clickwrap agreement. https://www.emiratesnoor.com