A Sample Customer Data Protection Policy