Database backups are sent via email. Depending on who hosts your email and your site's compliance needs, you may need to note that this information is sent to that host and link to their privacy policy.