Privacy notice

Placeholder. This deployment hasn't published its actual privacy notice yet, a real one, naming what's collected, why, how long it's kept, and who to contact, needs to replace this before going live.