The answer to this is: maybe. The General Data Protection Regulation (GDPR) applies to all organisations processing personal data of EU citizens, regardless of the company's location. Therefore, if a business based in the UK sells goods or services to customers within the EU, they must comply with GDPR regulations or face potential fines from local data protection authorities. However, a UK-based business may be exempt from GDPR enforcement if it doesn't actually collect any consumer data and only operates as a pass-through merchant, meaning it takes payment information but never stores that information on its own systems. Companies operating outside the European Economic Area (EEA) are not subject to GDPR enforcement unless there is some other nexus with the EU, such as having operations within the EEA or targeting customers in the EU for services. It is important to understand that GDPR applies to all businesses selling goods and services in the UK regardless of their geographic location. Compliance should remain a top priority for any business engaging in cross-border transactions so that they can minimise potential fines from local data protection authorities. By remaining diligent and up-to-date on GDPR regulations, companies can ensure they are taking the necessary steps to protect consumer data while also avoiding costly penalties. As an Australian business with a website that is accessible to a world wide audience, you must still comply with the GDPR when selling services to EU customers. This may involve collecting customer data and providing appropriate privacy policies that meet the standards set forth by the GDPR. It is important to ensure that all collected data is secure, as this can be subject to hefty fines if not properly safeguarded against potential threats. By understanding your obligations under the GDPR and taking steps to ensure compliance, you can protect yourself from potential fines while continuing to provide quality services across borders. By investing in a team of professionals who are knowledgeable about GDPR regulations or consulting an expert on the matter, you can gain peace of mind knowing that all necessary measures have been taken to protect customer data and remain compliant with GDPR regulations.