separate privacy statement.  data encryption.