Why bother creating a privacy policy?
The new GDPR regulations require you to be transparent and clear about what you do with any private information that you collect, store and process.
You are now required to add a privacy policy to your website that outlines what you collect, what you do with the data, who will control it and the rights your customers still have over this data.