GDPR requires that you collect consent from your users before using their personal data (cookies, browsing history, email address and phone number, etc.) for data processing like analytics, personalized advertising, email and text communications, etc.