A privacy policy is a legal document, an enforceable contract, that tells visitors to your website how your business will collect, use and safeguard any personal information you obtain from them. If you have detailed Privacy Policy that details exactly how you collect and use PII, but you violate your own Policy, you can subject yourself to legal liability to your visitors who relied on the Privacy Policy terms you said you would follow. It is a two-way street, the customer is “agreeing” to provide PII under the terms you say you will be using it for, but if you misuse data or otherwise don’t uphold your end of the bargain, you can be taken to court as well.
