This starter policy must be reviewed for your jurisdiction before launch. It should describe analytics, newsletter processing, cookies, data retention and user rights based on the services you actually deploy.