Often you'll have to explicitly call exit() after a call to header("Location: index.html?page=privacy").

IIRC it is version- and configuration-dependent.

But a redirect is pretty clearly the right way to do this. When you get ready to do SEO-friendly URLs, take a look at mod_rewrite.