You will need a privacy policy setting out the tools you use, the data they collect and the options to object to the collection. Additionally, you will need to give notice to the right to deletion and rectification as well as the contact point for data protection issues. If the GDPR applies to you then you must also enter into data processing agreements with your processors as well as maintain a processing register.