GDPR: Ask not what your research agency can do for you…