seems a pain i know but data protection in this day and age with people stealing others identities all the time we all have to be careful.
We opted to shut our online booking page down and just ask folks to call us, looked at it and out of the 94 bookings we have had in residence so far this year so far only 2 came from the website form. going over the next 100 or so bookings none cam from the online booking forms. we only had 12 forms last year.
I have still gone through the process of looking at the DGRP as its not just relevant to online data. I prefer no matter how tedious to ensure we stay within the law in every aspect.