I also have small businesses in the UK, so we also have no choice about complying. The abundance of caution described by downandout here seems excessive, even to me as a confirmed GDPR critic, but to good actors of the kind mentioned, the GDPR is basically just an exercise in bureaucracy, cost overheads, and uncertainty. Things might be different for B2B service providers, but if we make a single extra penny from anything to do with this whole mess in B2C world, I'll be amazed.