You may even want to crank out some legalese about precisely what is done with the info: how long it is retained, what exact circumstances would compel you to

You may even want to crank out some legalese about precisely what is done with the info: how long it is retained, what exact circumstances would compel you to release it, etc. Sounds like you have the right idea, though.