The best data policy is to collect no data at all.

Personal information of Coinbase users was stolen in order to scam them.

Use Bitcoin peer to peer or use non KYC exchanges like robosats, bisq and others.