> you also need a privacy policy if you are receiving phone calls. did you know that?

You mean your website needs to have a note next to your phone number saying something like "we will not record your phone calls", and if there isn't, you're liable to be fined?