added privacy section to legal.html