Does your organization have a privacy policy?

It should.

If you need help, the DMA has a Privacy Policy Generator.

Check it out!