New Website GDPR policy statement

I am creating a new website for a family business, the sell Garden Buildings although there is no eCommerce involved. They are having an email form on the site. The senders' contact details from that form are not stored in a database and are not passed to any other party. The same for anyone following on Social Media, we do not collect or pass on contact details- So we are looking for a simple GDPR statement to make those statements and put customers at ease.