Before or at the point where a business will collect your personal information (for example, when you visit a website, create an account, make a purchase, or use an app), it must provide an explanation of the types of personal information it collects and how it may use that data.