A Data Policy is an internal company document that outlines how a company must handle personal data, from collection to destruction. It will outline how a company can collect data, what data can be collected, how the data is to be securely stored, limits on how it can be processed, how long it can be stored, and other important details and parameters that the organization must follow.