Your business is privy to a lot of data. A lot of information flows in from clients, vendors and even your employees. This includes Personally Identifiable Information (PII)--data that can help identify an individual and perhaps even get in touch with them. A privacy policy tells others how your business will be using all the PII
