With the recent GDPR requirements, small business website owners have been left to review their business practices in order to make sure they remain compliant. Kinsta did great job at going over a lot of the practicals here: https://kinsta.com/blog/gdpr-compliance/.
While going through the process myself I decided in most cases it was easiest if I limit the amount of info I’m collecting. See below for a few examples. If your business isn’t dependent on the info it’s collecting for marketing purposes, then collecting less tracking info might be an easy starting point before diving into full GDPR compliance.