In the United States, CalOPPA (the California Online Privacy Protection Act) requires any website that collects personal information from a resident of the state of California to add a Privacy Policy to their site.
Even if your business isn't domiciled in California, CalOPPA applies to you because you cannot prevent Californians from using your site. A Privacy Policy covers your back regardless of where your site users call home.
The GDPR (General Data Protection Regulation) enacted in May of 2018 also requires you to have a Privacy Policy. The GDPR protects European residents and citizens from predatory data practices. It requires transparency and accountability from businesses that collect any form of data from cookies to user-provided email addresses.
Other major laws regulating the way businesses process data include:
CRAFT COMPUTERS DOES NOT SHARE ANY PERSONAL DATA WITH THIRD PARTY VENDORS.