Explains how an organization collects, uses, stores, and protects personal data from users or customers. The type of information collected, the purpose of collection, data-sharing practices, security measures, and users’ rights.