I was just reading this
https://www.bloomberg.com/view/articles/2018-04-25/tech-is-getting-eu-privacy-rules-all-wrong
and it mentioned this as an example of a good privacy policy:
and it’s a theatre so it’s even relevant!
I’m going to read it in detail and check whether there’s anything in it that a Monad customer wouldn’t be able to say, but it looks like a good source for copy & pasting to me.