The document that would answer the question
The document is the privacy notice, ideally with sections on data collected, purposes, retention and third parties. A reader would list each category and note whether any are vague.
Look for statements about overseas disclosure, since data might be processed in other countries. Note whether the notice explains how to request access or deletion.
