The set of policies that an organization or party uses to collect or hide information about an end user or customer of the organization, particularly where it concerns private information.