The purpose of processing personal data. Categories of data subjects (e.g., subscribers, customers). Types of personal data processed (e.g., email addresses, names). Data retention period. Security measures in place to protect data. Third parties with whom data is shared.