Comment by pb7

Is it his problem? He doesn’t have to respect GDPR because he doesn’t operate in the EU. Sounds like it’s your problem if he doesn’t handle your data the way you think he does.