Businesses that collect any type of personal information are legally required to have a Privacy Policy. However, if your business doesn't collect personal information, you should still have a simple Privacy Policy that states this. People expect to see a Privacy Policy, and not having one will look untrustworthy.