As you're in the UK, look at the ICO website for GDPR help - https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/. Lots of information there.
Security and privacy
Privacy / Site / Cookie Policies (GDPR)
This discussion has been locked because a year has elapsed since the last post. Please start a new discussion topic.