For a start, complicated privacy policies must make way for a better design that helps people understand the choices and control they have over their information