Last revised at 12.01.26
1. Object and purpose of this General Privacy Policy
Since its creation, bpost has attached great importance to privacy and it is one of the fundamental values on which its policy is based. The clearest example of this is the strict observance of the secrecy of correspondence (secrecy of correspondence) in accordance with the Belgian constitution and the European Convention for the Protection of Human Rights and Fundamental Freedoms.
In an increasingly digital world, bpost needs to collect and process personal data to provide the products and services it offers.
This General Privacy Policy explains in general terms how bpost collects and processes your personal data when you use bpost's websites (www.bpost.be and other websites), applications, products and services or when you interact with bpost in any other way (e.g. by calling the bpost call center).
For specific bpost websites (e.g. https://career.bpost.be/en), applications (e.g. My bpost), products and services, bpost additionally provides a Specific Privacy Policy per website, application, product or service. This Specific Privacy Policy must be read in conjunction with this General Privacy Policy. The Specific Privacy Policy per website, application, product and service is available on the relevant website and within the relevant application.
In case of conflict between the General Privacy Policy and the Specific Privacy Policy, the Specific Privacy Policy shall prevail.
2. Who is the data controller?
The Controller is bpost SA, a limited liability company under public law with registered offices at Anspach Boulevard 1 box 1, 1000 Brussels BE 0214.596.464. Hereinafter also referred to as "we" or "us".
3. What personal data do we collect, for what purposes and on what legal basis?
Categories of personal data, purposes and legal grounds
The categories of personal data, purposes and legal grounds for processing are set out in the table below.
The personal data is collected via the bpost websites and applications, digital or paper forms, by e-mail or telephone or via cookies and similar technologies and, as regards camera images, when you visit bpost sites. For more information on cookies and similar technologies, please refer to our Cookie Policy.
In principle, bpost does not collect personal data from children. bpost's products and services are not intended for children and bpost does not promote or market its products or services to children. If you believe that we have collected and used personal data relating to a child without appropriate consent (from a person who is competent and entitled to give consent), please notify us using the information form (point 13. “How can I contact bpost?”) so that we can immediately remove such data from our systems and make other necessary corrections.
If bpost wishes to process your personal data for another purpose, it will ask for your permission where necessary.
Provision of postal and parcel services
For the provision of postal and parcel services, for the negotiation, conclusion and/or performance of an agreement that you (or your organisation) conclude or have concluded with bpost in relation to specific products and/or services, to provide and follow up on the requested products and/or services, for the management of these agreements, for invoicing and collections within the framework of these agreement(s).
Personal data
Identification data such as name, first name and signature.
Address details (as provided directly by the person concerned or as indicated on a letter or package).
Contact details such as e-mail address and phone number.
Details of mail or parcels sent as part of bpost's postal and parcel activities.
Transaction data such as information on products or services purchased, bank account number, VAT number and company number.
We also record in our systems whether you have placed a sticker in your mailbox indicating your wish not to receive unaddressed advertising mail.
When you receive a parcel on behalf of a third party, such as one of your neighbors, we also process certain information about you, such as your name and address, provided to bpost by the parcel recipient in their Delivery Preferences.
Legal grounds
If bpost has an agreement with the data subject, the processing for these purposes is necessary for the conclusion or performance of the agreement between bpost and the data subject.
In the absence of such an agreement with the data subject, the processing will be necessary for bpost's legitimate interest in processing data relating to individuals in the context of these agreements.
Certain processing operations may also be necessary for a legal obligation incumbent on bpost.
For the neighbors’ data, this processing is based on bpost's legitimate interest in properly executing the delivery service while respecting the recipient's preferences. We are committed to protecting your personal data and using it solely for the purpose of parcel delivery.
Process your question or request
To be able to process your question, communication or request and, if necessary, to reply to it (e.g. to provide you with requested information on bpost's products or services), in the context of applying for or providing bids or requests for offers, for support and incident handling with respect to the bpost products or services, for general customer management.
Phone calls may be recorded for specific purposes, such as quality monitoring and handling potential queries from the ombudsman.
Personal data
Identification and contact details such as name, address, email, phone number.
Any other information necessary to handle your request.
Telephone calls recording and related data (i.e. caller identification, telephone number, time and duration of the call and the service to which the call relates) in the event of contact with the bpost contact centre or any other telephone contact with bpost (e.g. with the sales centre).
Information resulting from your interaction with bpost such as content of emails and complaints.
Legal grounds
If bpost has an agreement with the data subject, the processing for these purposes is necessary for the conclusion or performance of the agreement between bpost and the data subject.
If the question, communication or request is not linked to an agreement between the data subject and bpost or if the support or interaction with the data subject is not strictly necessary for the performance of the agreement, the processing is based on bpost's legitimate interest in ensuring good relations with its customers or third parties.
We may also seek your consent to process your personal data when responding to your request for information about specific products or services.
In the case of calls to the banking service , processing is based on the legal obligation arising from MiFID II and IDD Directives transposed under the Belgian law (the law of 25 April 2014 and the royal decrees implementing the law of 22 February 1998 establishing the organic status of the National Bank of Belgium and the law of 4 April 2014 on insurance).
Enhance bpost's websites and products
To enhance bpost’s websites, applications, products, and services —such as by gathering feedback through satisfaction surveys, market research, or call recordings— and to better understand our customers’ lifestyles in order to design services, products, or marketing campaigns that align with their needs and expectations.
Personal data
Identification details such as your name, first name.
Contact details such as your address, e-mail address and phone number.
If not anonymised, we collect the information resulting from your interaction with bpost such as feedback to satisfaction surveys.
Legal grounds
This processing is based on the legitimate interest of bpost to continuously improve and adapt its websites, applications, products and services.
In order for mail to arrive in the right mailbox
To improve its sorting and delivery processes so that mail arrives in the right mailbox (e.g. by using automated recognition techniques to identify incorrect or incomplete addresses and by comparing these incorrect or incomplete addresses with correct address data available to bpost in its operational databases used in the distribution of mail (e.g. database with addresses of physical delivery points).
Personal data
Identification details: name, first name, address.
Legal grounds
This processing is based on Article 3, §3, of the Royal Decree on Postal Services (14.03.2022) for the comparison of incorrect or incomplete addresses.
This processing is based on bpost's legitimate interest in optimising its sorting and delivery processes and thus ensuring that mail is delivered to the correct recipient.
Inform on the delivery status
To inform you on the delivery of your parcel, we use your email address (provided by the sender or through My Preferences Service or Mybpost App) to send you tracking notifications. These notifications inform you of the delivery status, scheduled date, location, any required actions, and allow you to set your delivery preferences. Their purpose is to reduce failed deliveries due to the recipient's absence, helping you better organize the reception and improving both the efficiency of our services and your customer experience.
In some circumstances, you may also receive notification on your phone number (for instance, for Pick-up points and Parcels lockers or when customs fees are applicable).
Personal data
Identification details such as your name, first name.
Contact details such as your address, e-mail address and phone number.
Legal grounds
This processing is based on bpost's legitimate interest in optimizing its delivery process by minimizing undelivered parcels due to the recipient's absence, while providing you with a smooth and tailored service.
Advertising
To send advertising, personalised or otherwise, on bpost's products and services by post, phone call or by e-mail, or within bpost's applications; to display advertising, personalised or otherwise, on bpost's websites or within bpost's applications.For certain products and services (to the extent specified in the Specific Privacy Policy), bpost uses social media to show customers personalised advertising on bpost's products and services based solely on their website behaviour (which is collected via cookies or similar technologies).
Personal data
Identification data such as name, first name.
Contact details such as address, email, phone number.
Online and technical information such as information on the use of the bpost websites and applications, IP addresses and information on the device used to access the bpost websites and applications, language preference on the website and website behaviour (e.g. pages visited on the bpost websites).
Derived information which is information that bpost derives from certain personal data.
Data obtained from public sources (Statbel, DoNotCallMe, Robinson and SFP Finances lists).
Legal grounds
This processing is based on bpost's legitimate interest in promoting its products and services.
Where required by law, your consent will be sought.
Find more information under point 6 of this General privacy notice.
Send messages concerning bpost's products
To send informative or operational messages concerning bpost's products and services (for example, messages concerning changes in legislation that affect the use of bpost's services and products; messages concerning bpost's operational functioning; messages concerning the validity of certain products such as stamps) and to send warnings concerning illegal practices that could affect bpost's customers or application users (for example, sending alerts concerning phishing practices that abuse bpost's name).
Personal data
Identification and contact details such as name, first name , email, address, phone number.
Legal grounds
If bpost has an agreement with the data subject, the processing for these purposes is necessary for the conclusion or performance of the agreement between bpost and the data subject.
If the communication is not linked to a contract between the data subject and bpost or if it is not strictly necessary for the performance of the contract, this processing is based on the legitimate interest of bpost to inform its customers and the users of its applications about matters relating to bpost's products and services and thus to strive for the improvement of its services, also in view of its position as a public law company.
Promote bpost
To promote bpost. In case you let a positive comment on one of our social media or websites, we might republish it to promote our services.
Personal data
Identification details such as name, first name, location.
Information coming from comments or social media posts.
Legal grounds
This processing is based on the legitimate interest of bpost to promote its services based on its customers' feedback.
Keep our information up to date
We use the data to keep our information accurate and up to date, to meet our legal and compliance obligations, and to prepare and run marketing activities such as identifying potential customers or improving customer retention.
Personal data
For business clients (and employees working for those), we may collect, by ourselves or via an intermediary (such as Trends Business Information), data related to your business, including business contact details data.
The data may come from public sources such as the Crossroads Bank for Enterprises, the Belgian Official Monitor the National Bank of Belgium, the National Social Security Office, or even professional directories such as the Yellow Pages.Legal grounds
This processing is based on the legitimate interest of bpost in keeping our records up to date, running our business responsibly, and communicating with existing or potential customers in a relevant way.
Staff and property safety
To ensure the safety of its staff and property, and if necessary to collect evidence of accidents, thefts or other incidents by means of surveillance cameras.
Personal data
Camera images (see point 4).
Legal grounds
The processing of personal data by means of surveillance cameras is based on bpost's legitimate interest in protecting its staff and property.
For more information on the surveillance cameras, please see point 4.
bpost assets
To evaluate or carry out an acquisition, merger, demerger, restructuring, reorganisation, dissolution or other sale or transfer of some or all of bpost's assets, whether by way of transfer of all or part of the business, or as part of bankruptcy, liquidation or similar proceedings, where personal data held by bpost form part of the transferred assets.
Personal data
Any personal data held by bpost forming part of the transferred assets.
Legal grounds
The processing for these purposes is necessary for the legitimate interest of bpost in carrying out the said business transactions to implement its business strategies or grow its business.
Combating of fraud
For accountability purposes, the combating of fraud, crimes and infringements, and the management of disputes and any legal proceedings, to comply with legal obligations or court orders.
Personal data
Identification data such as name, first name.
Contact details such as email, phone number.
Legal grounds
These processing operations are necessary for a legal obligation to which bpost is subject or, in the absence of such an obligation, for the legitimate interest of bpost in defending itself before the courts and in combating fraud, offences and infringements.
GDPR
To process your data subject rights requests, which includes searching for, collecting, and modifying data within bpost’s IT systems as necessary to respond to your request. This is done in connection with the exercise of your rights and the organisation’s legal obligation to comply with the General Data Protection Regulation (GDPR), specifically Chapter 3, "Rights of the Data Subject." For more information about your rights, please refer to our General privacy policy (see point 12).
Personal data
Identification data such as name, first name, birthdate.
Contact details such as email, phone number, address.
Information deemed necessary to verify your identity.
Any details you share in your request.
Legal grounds
These processing operations are necessary for a legal obligation to which bpost is subject or, in the absence of such a so-well defined obligation in the law, for the legitimate interest of bpost in answering in the most complete way to a data subject.
4. Where does bpost use camera surveillance?
bpost has installed surveillance cameras in private places accessible to the public to ensure the safety of its staff and property on the one hand, and to clarify the circumstances of an accident, theft or other incident on the other.
On major bpost sites (sorting centres, head office, EMC/Brucargo, Jemelle, Mechelen stamping house, Cargoville...), images are visualised in real time by the operators of a certified external video room that, if necessary, calls for an intervention in the event of violation, damage or disruption of public order.
In the other bpost sites, the images are consulted by bpost or the certified external monitoring centre in the event of theft, incidents or alarms.
5. bpost account
You will be able to log in to the various applications and access the various services offered by bpost via the bpost account. Registration is required to verify your identity and so protect your data as part of bpost’s identity and access management.
Depending on the application, product or service, bpost uses different identification and authentication methods for which bpost must collect personal data (e.g. through PING, Itsme, or liveliness check).
For more information on the bpost account and identification or authentication methods, read the dedicated privacy notice.
6. The use of your personal data for commercial purposes
bpost also uses customer data for commercial purposes. For example, sending you advertisements or for analyses aimed at getting to know our customers better. To this end, bpost wants to give its customers control over their data: you decide which data we can use. To this end, we have developed a system of five Privacy Levels that allow for different uses of data. You can choose from these levels and manage your choice at any time via our "Your data, your choice dashboard". Depending on the service, this direct marketing communication will take place via various channels such as letter, e-mail, telephone, or via advertising platforms (such as Google, Meta*, Twitter, LinkedIn etc.). This is also specified in the applicable Specific Privacy Statement. bpost also checks the Do Not Call Me and Robinson lists to ensure that your commercial communications choices are respected.
Our Privacy Levels
- Level Limited - "Strictly operational information": With this first level, bpost will not use your data for commercial purposes. You will therefore not receive any advertising from bpost. No commercial profiles will be created of you and you will continue to receive communications for operational purposes. You cannot stop this as long as you are a customer because these communications are necessary for bpost to carry out our agreement with you as a customer.
- Level Additional - "Additional recommended information": If you choose this level you will receive advertising, but it will not be personalised and no profile will be created about you. Only your user data will be used to send you advertisements for products or services similar to those for which you are our customer. This is because we have a legitimate interest in sending this type of advertising to our customers (soft opt-in).
- Level Optimal - "Tailor-made information": this level stands for personalised advertising for bpost products, services and applications. This use will only take place if you have given your specific consent. From the personal data that bpost collects regarding your use of our websites, applications, services or products, bpost derives information regarding your interests and preferences. Based on these interests and preferences, bpost creates profiles and uses these profiles to send or display personalized advertisements. We therefore use user data and transaction data. To find out what user data and transaction data are, please refer to the Specific Privacy Declarations of the products, services and applications). It is important to note that we do not use all of this data. For example, we will never use your copy of an ID card, your photo (should we have it), or your national registration number in commercial analyses or to build profiles of you.
Bpost has established the categories of similar products according to its products, services and applications as well as the categories of customers concerned (relations with professional customers or relations with non-professional customers). Details of these categories can be obtained on request. - Data quality level: If you choose this level, you authorise us to communicate your data (surname, first name, e-mail address, language, title, date of birth) to third-party companies in order to update their databases. This data will therefore only be provided if these companies already know you, request it and if you have given your consent. This level is different from our legal obligation to provide your new postal address to companies that request it, unless you object, in order to improve postal activities within the framework of Article 3 of the Royal Decree of 14 March 2022 on postal services (bpost's Move service).
For the time being, the data quality level only applies to the data collected within the framework of the bpost Move service. - Data Supply level: If you choose this level, you give us your consent for us to draw up a profile on the basis of the information you have provided to us, and for us to transfer your data to third-party companies so that they can contact you to promote their services and actions. At the moment, the data supply level only applies to data collected in the context of our SelectPost questionnaires. For more information on the companies to whom we may transfer your data, please refer to the Selectpost specific privacy notice.
How can you adjust your Privacy Level?
- Via our Dashboard
- By exercising your rights via our webform
- By letter
*Specific information on Meta products we use:
If you give your consent via the cookie's settings, we use Meta’s marketing trackers (such as Meta Pixel) to allow Meta to collect or receive information about your journey on bpost’s websites. Meta then uses this data, acting jointly with bpost, to provide measurement services, targeting services, and to deliver advertisements for bpost products. You can withdraw your consent at any time via the cookie settings. Further information about how Meta Ireland processes personal data—including the legal bases Meta Ireland relies on and how you can exercise your data subject rights against Meta Ireland—is available in Meta Ireland’s Privacy Policy at https://www.facebook.com/about/privacy. bpost has entered into a joint controller agreement with Meta, which can be found here: Facebook. Under this agreement, Meta is responsible for responding to data subject requests related to Meta Ireland’s data processing.
7. Does bpost use your personal data for profiling or automated decision-making?
bpost does not systematically carry out automated decision making within the meaning of Article 22 of the General Data Protection Regulation, namely automated decision making with a legal or significant consequence for you. This would be the case, for example, when a decision on whether or not to subscribe to a particular service is taken by a computer program without the involvement of a bpost employee.
Exceptionally, if bpost were to engage in automated decision-making in the context of a specific web site, application, product or service, this would be stated in the applicable Specific Privacy Policy for the web site, application, service or product.
Use of artificial intelligence
bpost is working on using artificial intelligence (AI) systems (e.g. General Purpose AI or specific Purpose AI) as provider or deployer to enhance its services, including personalizing user experiences, improving operational efficiency, and analyzing usage patterns. These AI systems are designed to process data in a manner consistent with applicable privacy laws and regulations. We ensure that any personal information handled by AI is subject to strict safeguards. We do not use AI to make decisions that produce legal or similarly significant effects without meaningful human oversight.
Where mandatory according to the AI Act, we will publish specific transparent notices on the different tools we use for dedicated services.
8. With whom do we share your personal data?
In the context of the purposes referred to under point 3, bpost may use service providers that process personal data in the name and on behalf of bpost. These service providers may be third parties or other entities of the bnode. In such cases, these service providers act as processors. In particular, bpost may use companies providing the following services: hosting and ICT services, marketing and market research services, logistics services, archiving services. As the list of these processors depends on our daily operations and the processing activities concerned, the list of these processors can be obtained via an information request.
bpost may share commercial data of customers and suppliers as well as personal data of customer or supplier personnel with other entities of the bnode for commercial purposes, i.e. to enhance the cooperation and integration between the different bnode entities, to discuss future business strategies, to negotiate agreements, to offer more streamlined and customer-centric solutions, to share prospects and business opportunities, and to collaborate more closely with other bnode entities on activities such as joint purchasing, combined or joint offers, or cross-selling efforts. This is based on bpost's legitimate interest to align on future business strategies with the bnode entities, strengthen bpost's competitive position by enabling bpost to prepare a tailored competitive offer for customers, to better prepare for contractual negotiations, to discover new business opportunities and prospects, and to achieve cost efficiencies by cooperating with other bnode entities (https://bnode.com/who-we-are/organizational-structure).
bpost may also transfer your personal data to consultants and professional service providers acting as data controllers, such as lawyers, accountants and auditors. Your personal data may also be transferred to third parties in the context of a corporate transaction such as a demerger, merger or acquisition.
As a postal operator, bpost SA is a member of the Universal Postal Union (UPU). We share data with other member organisations to support the delivery of our services worldwide and to contribute to the improvement of postal and logistics services through global collaborative projects. Where indicated in the Specific Privacy Policy, for certain products and services bpost may also share aspects of customers' website behaviour with social media to show those customers personalised advertising on bpost products and services or to prevent less relevant advertising from being shown.
Universities may occasionally request certain non-directly identifiable personal data for academic research purposes. In such cases, we ensure compliance with GDPR requirements before sharing any personal data.
We may also exchange company-related data with third-party business information providers.
bpost may also communicate your personal data to third parties if required to do so by law or following a request or order from the authorities.
Where required, bpost will seek your consent before disclosing your personal data to third parties. bpost will not rent or sell your personal data to third parties unless you have given your specific consent to bpost to do so.
9. Are your personal data transferred to countries outside the European Economic Area?
Certain service providers or third parties to whom your personal data are transferred may be located in a country outside the European Economic Area where the data protection rules differ from those applicable in Belgium and elsewhere in the European Economic Area. In such a case, bpost takes the necessary measures to ensure an appropriate level of protection for your personal data and provides at least one of the following guarantees:
- The personal data are transferred to a country that is deemed to provide an adequate level of protection for personal data. This is the case for countries for which the European Commission has issued an adequacy decision, such as the United Kingdom or the USA where applicable.
- For transfers to countries that are deemed not to provide an adequate level of protection (so-called "third countries"), bpost provides additional safeguards, such as the conclusion of standard contractual clauses of the European Commission, which ensure that personal data is given protection equivalent to that provided in the European Economic Area. That is the case for our service providers located, for example, in India.
In the cases where bpost uses the contractual model clauses of the European Commission for transfers to third countries, bpost has also carried out an analysis of the level of protection offered by the legislation in these third countries and, where necessary, has taken additional measures to ensure that the level of protection is essentially equivalent to that within the European Economic Area. More information on these measures (including a copy of the model clauses) can be obtained by contacting bpost as described in point 13 “How can I contact bpost”?.
10. How long do we keep your personal data?
In principle, bpost retains your personal data only for as long as necessary for the purposes described (taking account of the applicable legal retention and/or limitation periods). Personal data linked to contractual documents (e.g. a subscription to a bpost service) are kept for a maximum period of 10 years after the termination of your contract with bpost.
The personal data processed to ensure to deliver a parcel according to the delivery preferences of a recipient will be kept for a period of 36 months after the last activity in the My Parcel Preferences service, after which the data will be deleted. If the preferences given are specific to a particular parcel, this period is reduced to 13 months.
Personal data relating to requests and complaints shall be retained for 6 years after the request, application or complaint has been dealt with except for data subject requests covered by article 12 of this Notice for which we will keep data for 5 years.
Camera images are kept for 30 days and telephone calls for a maximum of 6 months.
For more detailed information on the retention period for specific websites, applications, products and services, please refer to the applicable Specific Privacy Policy available on the relevant website and within the relevant application.
11. What data security measures does bpost take?
bpost takes technical and organizational security measures to protect your personal data against destruction, loss, modification, access or misuse. This includes measures to limit access to the personal data as much as possible and to grant access only when necessary. Employees who have access to the data have been informed of their obligations with regard to data security. The security measures are regularly reviewed and adjusted to ensure an appropriate level of security.
12. What rights do you have regarding your personal data?
Under the terms of the General Data Protection Regulation, you have the following rights:
- Right of access -You have the right to access the personal data that bpost processes about you and to obtain a copy of these personal data (subject to certain exceptions).
- Right to rectification and erasure - You have the right at any time to have your personal data rectified or erased by bpost free of charge, provided that the legal conditions for doing so are met. Personal data that bpost needs in order to fulfil ongoing orders or for which bpost is legally obliged to hold cannot be deleted.
- Restriction of processing - You can require bpost, subject to compliance with the applicable legal provisions, to restrict the processing of your data.
- Right to data portability - Under certain conditions, you have the right to portability of the personal data you have provided.
- Objection - You may object to processing for advertising purposes or processing for the legitimate interests of bpost. You may do so even without grounds for the processing of personal data for direct marketing purposes. It may take up to 30 days for your objection to be applied to all our databases. You may therefore still receive some communications within this period.
- Withdrawal of consent - If bpost processes your personal data on the basis of your consent, you have the right to withdraw it at any time. However, this withdrawal will not affect the lawfulness of the processing of your personal data for the period prior to the time of withdrawal and for processing activities based on another legal basis.
- Complaint to the competent authority - You always have the right to contact the data protection supervisory authority of the Member State of the European Economic Area where you normally reside, where you have your place of work (if applicable) or where the alleged breach has taken place, and to lodge a complaint if appropriate. For Belgium, this is the Data Protection Authority (www.dataprotectionauthority.be/citizen).
If you wish to exercise your rights with regard to bpost, you can do so by contacting bpost using the contact details provided in point 13 "How can I contact bpost?".
When we obtain personal data directly from you, you are generally free to decide whether or not to provide bpost with the personal data, except in the event of a legal obligation. If you do not wish to provide your personal data, you may not be able to use the products or services offered by bpost, your questions may not be answered and/or you may not be able to conclude an agreement with bpost.
13. How can I contact bpost?
For questions, complaints or the exercise of your rights, please contact bpost and its data protection officer:
- Online via the appropriate web form.
- By post to the following address: bpost, Attn. Data Protection Office, Anspach Boulevard 1 box 1, 1000 Brussels.
For security reasons, we ask you to accompany your requests with your full contact details and a means of verifying your identity (e.g. a copy of the front of your identity card or driving licence in which the photograph and the national register number or card number must be illegible). bpost reserves the right to request additional documentary evidence where necessary.
bpost may refuse requests that it considers excessive or constitutes an abuse of the relevant right.
14. Amendments to this General Privacy Policy
bpost reserves the right to amend this General Privacy Policy, in particular in order to adapt it to a change in the provision of services or to legal and/or regulatory requirements. Amendments to this General Privacy Policy enter into force at the time of publication. We recommend that you always consult the most recent version. The date of the last revision will be mentioned at the beginning of this General Privacy Policy.
