A Privacy Policy is required when you collect or use any personal information. This could be something as overt as collecting email addresses to send out your marketing emails, or as subtle as using cookies for analytics purposes.