Drafting privacy policies is a pain but there are a lot of services now that will generate one for you pretty quickly. Though I do have to wonder if the generated plan was then not up to standards what steps would have to be taken to correct it