add basic privacy policy