Privacy policy
A document explaining how users' personal data is collected and processed
A privacy policy is a document that explains who processes which personal data, why, how long it is kept, who it is shared with and how it is protected. It also states how a person can exercise their rights and contact whoever is responsible for data processing. For example, if a studio asks for a name and phone number to call back, the policy explains how that information is used. It does not replace consent to data processing where consent is required.
Personal data is information about a person who can be identified directly or indirectly. Specific requirements for the policy depend on the applicable law and on how the data is actually processed.