Bootstrap GDPR compliance

Thanks @meredydd yes that’s helpful and I hadn’t noticed it.

Looks like I probably just need to knock up my own privacy policy taking bits from yours and adding some app specific stuff