‘Niche Envy’: Is ‘privacy policy’ what it should be?