In theory you just need to have a way for people to contact you, like an email address. And then when you get an email you just need to handle their data according to the GDPR rules.

I have a website with user data and I’m perfectly GDPR compliant, just by having an email address available for contact and manually deleting their data if they ask for it.