Whether someone has to provide details to be means tested in none of the club's business. I hope that they keep the information safe, We do not want a GDPR breach do we. That can be very expensive, it would be cheaper to give everyone their money back.