A privacy policy is a legal document that tells users what personal data a company collects (like names, emails, IP addresses), how they collect it, why they use it, who they share it with, how they protect it, and what rights users have over their data (like access or deletion), often required by laws like GDPR and CCPA, and usually found in a website’s footer for transparency and trust building.