I think it's phrased "may be collected" because often data will only be collected under certain circumstances, either because the user chooses to fill in option

I think it's phrased "may be collected" because often data will only be collected under certain circumstances, either because the user chooses to fill in optional fields or because they use a specific feature requiring that data.