Hello Jessica,
What country your company is based in makes a big difference here. In general, you'll want to consult with your legal team. Marketo collects activity data based on forms, clicks, and email activity. We don't share this information with any third parties. You should be able to add this information into your existing policies with guidance from your legal team.