In a privacy management environment, an organization's stated position on how it intends to use the privacy-sensitive information that it collects. A privacy policy constitutes an agreement between an organisation and the owners of personally identifiable information (PII) that the organisation collects. See also opt in, opt out, P3P privacy policy.