A compliant privacy policy must clearly state the types of personal data collected, the specific purposes for which that data is processed, and the lawful basis relied upon. It must describe how the data will be used, identify the parties with whom it may be shared, and indicate the geographical scope of processing. The policy should specify the data retention period and the method of destruction after use. It must also inform data subjects about their rights—such as access, correction, and deletion—and explain how they can exercise those rights. Additionally, it should outline how to contact the controller and must be presented in a clear, accessible format, such as via websites or apps. The policy must reflect the nature of the controller’s activities and ensure that individuals are informed at the point of collection. The legal requirements of a Privacy Policy shall be mentioned in the forthcoming pages.