Collecting the information is one thing, but in these GDPR days, how long they're allowed to keep it, what they're allowed to use it for, and even how they store it is a whole different matter. Hopefully they're on top of all that though, as it does seem like a good use of the data.