Define key aspects of a data privacy policy for a hypothetical e-commerce web site.