How do you access customer's data for customer support?

How do you (and/or your customer support members) access your customer's data, and make account changes if necessary? And do you explicitly explain these procedures in your terms of use / privacy policy?