Are websites covered by GDPR? I have recently been banned from a website for contravening the moderator’s personal beliefs. It’s clear that there has been discussion about me (and this has now been made public on the forum). I am now concerned they hold my details and would like to make a subject access request (I believe they are based in the UK or the EU. Can I do this?