Privacy Policy

TODO: legal text — requires DPO/legal review before go-live (section 27, section 55).