If your web site doesn’t collect information about visitors, a privacy policy is usually optional. If you collect data, some industries, states, and countries have privacy policy requirements. For example, if you collect data from users who are located in California, you must post a privacy policy regardless of your own location.