When merchants sign a deal that has a payment processor, they agree to be matter to fines when they fall short to maintain PCI DSS compliance. Your business is service service provider dependent outside the EU. It provides services to buyers outside the house the EU. Its customers can use https://www.nathanlabsadvisory.com/blog/tag/gdpr-compliance/