UK GDPR

The UK General Data Protection Regulation

Recital 44 UK GDPR

Processing should be lawful where it is necessary in the context of a contract or the intention to enter into a contract.