I need to ensure customer data (email address etc.) isn't floating around in URLs parameters for GDPR reasons (PII) and for this reason I want to limit the use of existing system fields.

Can we have a new system field 'Customer ID' that can be numeric, alpha-numeric or a GUID and doesn't reveal anything about a customer? Can then be easily used in URLs. Let me know.