Absolutely. Shoprocket is fully compliant with all General Data Protection Regulations.  As a UK company we have been externally audited and publish our up to date Data Processing Addendum here