what is a privacy statement or notice and