If your company, for example through its website, collects or uses personal data for non-personal activities it is a legal requirement that you provide your users with information as to how this information is used. It is advised that you provide an easily accessible copy of your privacy policy on your website.
It is important to remember that these GDPR requirements do not only apply to your customers but anyone you collect information about. For example, employees or job applicants. It is important that you provide these individuals with a privacy notice and ensure they have understood it.