A privacy policy is a document that describes how your non-profit deals with personal information. Dealing with personal information includes its collection, use, disclosure, and retention (storage).