We are a small business that occasionally gets asked for our privacy policy, GDPR statement, terms of service etc.. we have all of these available by request (just drop us an email) If it is a policy we haven't heard of that we need to write...then we will. We do not profess to be experts in European/UK legislation, websites or such,but we try to do the right thing when asked  of us.