What counts as personal data
Personal data is any information that identifies you or can reasonably be linked to you. Some of it is obvious: your name, home address, phone number, email address and payment details. Much of it is less obvious. An advertising identifier on your phone, the model of your laptop, your approximate location, the pages you read and the time you read them can all be tied to a single person, even if your name never appears alongside them.
It helps to think in three groups.
- Information you hand over on purpose. Sign-up forms, purchases, profile details, photos and messages.
- Information collected as you go. Browsing history, app usage, device details, IP address and location signals, gathered by the services you use.
- Information inferred or bought from others. Guesses about your interests, income bracket or household, built by combining the first two groups with outside records.
The third group is the one most people never see. A company may know things about you that you never told it.
Who gathers it
Several kinds of organisation collect data, and their reasons differ.
The services you use directly. Email providers, shops, banks, streaming platforms and social networks collect what they need to run the service, and often more. Some collection is clearly necessary, such as a delivery address for a parcel. Some is optional, such as a detailed usage history that helps the company tune its product or sell advertising.
Advertisers and ad networks. Websites and apps often include code from third parties that records visits so that adverts can be matched to interests. How this works is covered in the explanation of targeted advertising, and the mechanics behind it are in the piece on tracking cookies.
Data brokers. These are companies that assemble records from public sources, purchases and other firms into profiles, and then sell or license them. You usually have no direct relationship with them.
Device and software makers. Phones, computers, televisions and connected gadgets commonly send diagnostic and usage information back to the manufacturer. Many such devices form part of the internet of things, and their reporting is easy to overlook because it runs quietly in the background.
Governments and employers. Records held by public bodies and workplaces are subject to their own rules, which vary by country and are outside the scope of an everyday overview.
Why it matters
Privacy is not only about hiding things. It is about having a say over who knows what about you and what they do with it. A few practical reasons it matters:
- Security. Data that is stored can be leaked. Names, email addresses and old passwords from past leaks are often reused by criminals to attempt sign-ins or to write convincing messages. This is covered in the article on data breaches.
- Money and fairness. Profiles can influence the adverts and sometimes the prices or offers you see, though how much this happens differs between businesses and is not always visible.
- Permanence. Information that is easy to publish is often hard to remove, a point explored in the article on digital footprints.
- Autonomy. Constant measurement can shape what you are shown, which in turn can shape what you notice and choose.
None of this means every company is acting badly. Most collection is routine. The aim is to make informed choices rather than default ones.
What you can reasonably do
Perfect privacy is not realistic for someone who uses the internet, and chasing it tends to lead to burnout. A smaller set of habits gives most of the benefit.
Start with account security. A leaked account is the most direct privacy failure. A password manager helps you use unique passwords, and two-factor authentication adds a second barrier if a password is exposed.
Review permissions. Apps often ask for access to location, contacts, microphone or photos. Granting only what a feature actually needs is a sensible rule, and app permissions are managed in your phone settings. Location in particular is worth a closer look.
Adjust your browser. Built-in options can limit cross-site tracking and clear stored data. The article on browser privacy covers these settings. Private windows are also often misunderstood, and the explanation of private browsing clarifies what they do and do not do.
Be selective on social media. Public posts are visible to far more people than most users assume, and they can persist after deletion. Check who can see what you share, and consider what a stranger could infer from it.
Think before typing into new tools. Chat assistants and similar services may keep what you submit. The topic of chatbot privacy is worth reading about before you paste anything personal or confidential.
Use encryption where it counts. Messaging that is protected by end-to-end encryption means only the people in the conversation can read it, not the provider carrying it. A virtual private network can hide your browsing from a local network such as a café connection, but it moves trust to the VPN company rather than removing it, and it does not stop sites you log in to from knowing who you are.
Read before you agree, within reason. Policies are long, but a few sections tell you most of what you need. The guide to privacy policies shows where to look.
Use less where you can. Data you never provide cannot be leaked or sold. Skipping optional fields, using a separate email address for sign-ups, and deleting accounts you no longer use all reduce what is held about you.
Rights and limits
Many countries give people some legal rights over their data, such as seeing what a company holds or asking for it to be deleted. The details depend on where you live and which company is involved, so check the relevant organisation’s privacy page or your national regulator rather than assuming a particular right exists. Responses can take time, and some data may legitimately be kept for legal or security reasons.
A sensible way to approach it
Treat privacy as a set of small, repeatable decisions rather than a one-time project. Secure your accounts first, then tidy permissions, then browser settings, and revisit them now and then, since software updates and new apps can change defaults. Each step reduces exposure a little, and together they make a real difference even though none of them is complete on its own.