GDPR Data Protection Policy for a typical NT Business