Under GDPR the rules about the information you need to include in a Privacy Notice are changing, requiring more information and information that is more specific.
The information can be layered, but it's still a bit unclear how much needs to be provided at the time of sign-up and how much can just be included in a separate printed / online version
There are full details available from the ICO, but the above is a useful quick guide.
