If your website has a form to collect personal information and uses cookies, US and EU legislation requires a website personal data use policy on data protection covering security of personal data, it’s use, distribution and user rights.