You should either make a specific privacy statement for the consent or include it within a general privacy policy. Look at www.rgpd.com’s free template for a privacy policy to use within your company.