Privacy Policy
Data & TrackingAlso: Privacy Statement · Privacy Notice
Quick definition
A privacy policy is a public statement of how your business collects, uses, stores and shares personal information. It tells people what data you gather, why, who you disclose it to and how they can access or correct it. For most businesses that collect personal data it is a legal requirement, and for marketers it is also the document that has to keep pace with every new tracking tool and data practice you add.
Where it shows up in the data
A complete policy covers what you collect, why, who you share it with, how long you keep it and how people can access or correct it.
Every new pixel, connector or data source changes your practices, so the policy has to be updated when the stack changes, not once a year.
Regulators and procurement teams read privacy policies. An accurate one is a compliance and trust asset. An inaccurate one is a visible liability.
What it actually means
A privacy policy discloses how you handle personal information. A complete one covers what you collect, the purposes you collect it for, who you share it with including third-party tools and platforms, how long you keep it, how it is protected and how a person can access, correct or delete their data. For marketers the important and often neglected point is that the policy has to stay in sync with reality. Every time you add a new tracking pixel, analytics tool, ad platform or data enrichment step, you have introduced a new way personal data is collected or shared, and the policy should reflect it. Regulators and increasingly procurement teams read these pages, and a policy that lags the actual stack is both a compliance risk and a trust problem.
A privacy policy is not a legal formality you copy once. It is a live description of what your marketing actually does with people's data.
How it shows up
A privacy policy shows up as a linked page in your footer and at your data collection points. Its real test is whether it accurately lists every tool and data flow your marketing actually uses, which is where most policies quietly fall behind.
The Australian context
In Australia the Privacy Act requires most businesses that handle personal information to have a clear, up-to-date privacy policy, and the ongoing Privacy Act review is tightening expectations around transparency and consent. A policy that does not reflect your real data practices is a growing risk.
Where people get this wrong
Related terms
Common questions
What is a privacy policy?
It is a public statement of how your business collects, uses, stores and shares personal information, including what you gather, why, who you share it with and how people can access or correct their data.
Is a privacy policy legally required?
For most businesses that collect personal data, yes. In Australia the Privacy Act requires most businesses handling personal information to have a clear, up-to-date policy.
Why do marketers need to care about the privacy policy?
Because every new pixel, connector or data tool changes how personal data is collected or shared, and the policy has to reflect it. A policy that lags the actual stack is a compliance and trust risk.
Debrief
Get the next one
No spam. No fluff. Just the next article, straight to your inbox.
Keep exploring
About New Rebellion
New Rebellion is a marketing intelligence consultancy. We build tools, score Australian businesses on how their marketing actually performs, and publish Debrief every day. This dictionary is part of how we work in the open.
How we think →