Never make a promise you can't keep - especially in your privacy policy