Privacy Policy must include certain information in order to comply with the GDPR. This includes contact details, the types of personal data collected, legal basis for collecting and using that data, retention policy, and rights under the GDPR. Privacy Policy must also include information about cookies and other tracking technologies that are used.n