¡Hola!
In Spain it is obligatory to check for the GDPR before to get any clients data, if not we can be fine up (normally the minimum used to be 60.000 euros fine up!!!).
As well, in the text ckeck box must be a link to the privacy policy.
I see that in your new lead capture it is not implemented. Can you do it???