GDPR/ICO compliance

[MrJuice]

May I ask some help on GDPR please

We are launching a landing page soon for a new business and will be collecting email addresses only for now.

There will be double opt in. Customer puts in email on our landing page and then they confirm they want to be on the mailing list through a link sent to their email

What do we need to do to be GDPR/ICO compliant

Any useful links would be great

Thank you