Update privacy-policy.md

Made language about how we use PII clearer and added language around notification of changes to the privacy policy.