Practical Steps to make your site GDPR compliant