Every site should have a privacy policy, and there is a very easy way to create a privacy policy for your web site. The way you do that is actually, I've got it stored in my favorites here.
You go to a website called -- www.the-dma.org. And I have actually linked to this on down below the presentation so that you can actually get there, and they have a privacy policy generator right on this website. You just go in and fill in the blanks at the bottom, you click, "generate policy." And they can either e-mail it to you or they can generate an HTML page or you can actually just grab that text if you want to. It's a pretty neat little program / website for generating a privacy policy for your (own) website.
And you can even stick a little link down on your website, like they have at the bottom of theirs, which basically says this is our privacy policy and this is what we are about. You need to have one of those on your website for a lot of different reasons, legal and otherwise.
(You) probably should have some legal advice in the process of that too so I have provided a link for a good place to get legal advice. But definitely get a privacy set up on your website because it's a good thing to do, and this website makes it a very simple process (It even will show you a sample privacy policy. So, I hope that this presentation has been helpful for you.