A statement or legal document that discloses some or all of the ways a company or entity gathers, uses, discloses, and manages an end-user's data, as well as specify ways in which the end user may contact the company to request details on the data that has been collected that identify them.
Ensures end-users understand how their data is handled, and is a legal requirement in many jurisdictions.