Can you advise on data protection?
I can check the technical functions of your website for data-protection issues — for example whether data is transferred to servers outside the EU, or whether other known problems are present, such as scripts embedded from non-EU providers without the necessary licences.
For this I use standard industry tools that list the connections made to other servers, then research each one individually: where the server is located, who owns it, and what the provider says about EU data protection.
I am not a lawyer, though, and cannot give legally binding information on data-protection matters.