A privacy policy is a document that describes how a non-profit deals with personal information. The policy should cover how this information is collected, used, disclosed, and retained.