We use customer data for order processing, billing, and support — do we need consent for all these activities?

No, these activities fall under legitimate use because they are necessary to deliver the service requested by the user.

However, the data cannot be reused for marketing or unrelated purposes without consent, which is where many businesses make mistakes.