Is web visitor tracking compliant? User tracking is lawful, but to maintain compliance, websites must have full oversight