A privacy policy is a document made by an organisation which explains how it will collect, process and store the personal data and information of its users, clients, and employees.