Seems like a pretty boilerplate privacy policy. When in doubt cover your own ass.

Privacy policies are just a waste of time anyways, bad actors are going to act bad regardless of any "policy" they have in place.

Not to mention the policy is not necessarily a contract.