A privacy policy is a legal document that explains how a company or website collects, uses, and shares personal information. Privacy policies should outline what personal information is collected, how the information is used, whether the information is shared with third parties, what rights users have over their data, and more.