They’ll usually process GDPR requests for anyone at these hacked together tech companies. It’s not worth the dev time to build two separate flows