Details on the personal data collected (email, phone), its purpose, legal basis, retention, and user rights under GDPR to be completed before launch.