I don't think your sign up process is GDPR compliant - you need to say why you are collecting the information you are asking for, what you are going to do with that information, how long you are going to retain it for and how one can request for it to be deleted.