fix link to privacy policy