If you collect personal information (PI) about your customers from your website (or offline), you will need to have a Privacy Policy in place and this will need to be available from your website with easy access for your users.