clearly communicates to individuals the extent of personal
information collected, the company’s obligations, the individual’s
rights to access, update, or erase their personal information, and
an up-to-date point of contact where individuals can direct their
questions, requests or concerns.