Your privacy policy is a legal document and a user-facing communication. It needs to accurately describe your data collection practices — including visitor intelligence — in a way that satisfies regulators and is understandable to a non-lawyer reader.
Under GDPR Article 13/14, a compliant privacy policy must include: what data you collect and why, the legal basis for processing, who you share data with (including third-party tools), how long you retain data, what rights users have (access, deletion, portability), and how to exercise those rights.
Add a specific section (or subsection) covering visitor intelligence. A compliant template:
If you're relying on legitimate interests as your lawful basis (most B2B teams are), document this explicitly: "We process company-level visitor intelligence data under our legitimate interest in understanding and communicating with potential business customers. We have assessed that this interest is not overridden by the rights and interests of website visitors, given the company-level (rather than individual-level) nature of the identification."