The SBA or U.S. Small Business Administration has a guide that helps website owners understand privacy policies. This valuable resource is free and covers both the legal aspects and implementation considerations. The SBA notes that the Federal Trade Commission (FTC) regulates this area, so it is important to understand the requirements behind privacy policies.
The U.S. Small Business Administration has articles and blogs that help explain the laws and privacy issues. The SBA covers topics ranging from data security to identity theft. Before you put together your policy, you may want to spend time learning this information and consider consulting a lawyer for more advice about your particular situation.