Comment by 45h34jh53k4j

You have a responsibility to your users, be they EU or not. The fact you consider "they keep sending it to me" means that you are not considering the whole privacy issue. This data is not yours to do with as you please. Yes they send it to you -- but you are listening, You are the active party here. There is a duty to protect your users data.