Next stage will be sending cards to the customers around the world.
That is a wholly incorrect statement from you.
Each geographical area has its own legal associations to protect end users so what is an acceptable process to the EU is different to what is the US market.
Then when you look at regulations for China, Russian, Singapore, Brazil, South Africa... you should stop exaggerating.