How should I inform subscribers about how their data is used?

When someone types their email into your signup form, they're trusting you with something personal. If you wait until they've already subscribed to explain what you'll do with that address, you've already missed the moment that builds trust, and potentially crossed a legal line. GDPR, CASL, and similar frameworks require disclosure at the point of collection, not buried in a confirmation email or a privacy policy nobody reads at signup.

The right place for your core data disclosure is right there on the signup form, immediately below the submit button. Something like: "We'll send you weekly tips on email deliverability. We don't sell your data or share it with third parties. Unsubscribe anytime." That's the whole contract, stated plainly. You don't need a novel. You need a sentence or two that covers what you send, how often, and what you won't do. If you're collecting data for multiple purposes (email plus retargeting, for example), each purpose needs its own disclosure.

Your privacy policy handles the legal detail: retention periods, third-party processors, subscriber rights, and jurisdiction-specific clauses. Link to it from the signup form with something like "See our full privacy policy" rather than presenting it as an agreement they have to scroll through before they can subscribe. The form disclosure and the privacy policy serve different audiences. The form copy is for the subscriber. The policy is for regulators.

If you ever change how you use subscriber data, tell your list before it happens. A short email explaining that you're switching platforms or adding a new use case does two things at once: it keeps you compliant and it signals that you respect your subscribers enough to explain things. Most senders skip this and then wonder why their engagement drops after a platform migration.

Your preference center is also a useful transparency touchpoint. When subscribers land there, show them their signup date and their current preferences. That visibility builds confidence and occasionally reminds people why they signed up, which reduces churn. If you haven't built a preference center yet, start with your signup form copy. Getting that right is the single most impactful thing you can do for data transparency.