The Privacy Policy is terrible.
"Before or at the time of collecting personal information, we will identify the purposes for which information is being collected."
I'm glad you've identified your purposes. Will you tell us about them?
"We will collect and use of personal information solely with the objective of fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law."
Since we don't know your purposes, we also don't know what your compatible purposes are. If your purpose is identity theft, fraud is a compatible purpose.
"We will only retain personal information as long as necessary for the fulfillment of those purposes."
Still meaningless, since you haven't told us the purpose.
"We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned."
So you only let users know "where appropriate" that info has been collected. What about all the other info you collect that it's not appropriate for us to have knowledge of?
"Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date."
Well, sure, if you're going to commit identity theft and fraud, we users should be required to keep you up-to-date on our particulars. Helps you out a lot.
"We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification."
So the reasonable security measures only apply to loss or theft? Why not to the rest of those things?
"We will make readily available to customers information about our policies and practices relating to the management of personal information."
Where? When? How?