We plan to connect an external support service for the site, but we are worried about the safety of users' personal data. What is the technically correct way to organize such a process?