A privacy policy should include the types of data you collect from visitors, how you use that data, who you share it with, and how you protect it. It should also include information about cookies, analytics, and third-party services.