Data privacy and compliance for personalized marketing