There are several sites that can help with the creation of your privacy policy.
Have your text reviewed by a lawyer before going live.
95% of data breaches start with human error. Know who's vulnerable.