• Indirect collection

• Sensitive information

• Responding to complaint

• Supporting procedures

Having a privacy policy does not mean much if you do not apply it in your business. You could be misleading customers if what you say in your policy and what you do in your business are different things. These documents help you understand what is required to properly manage personal information in your business and meet your customers’ expectations about protecting their personal information.