How brands can define a first-party data collection and management strategy to better protect customers' privacy