Privacy policy

[Draft for legal review — not yet in force]