We offer a templated Policy here - link - that covers all the basics. However, we recommend you consult your legal and compliance teams.