Automattic (the company behind wordpress) has their privacy policy and ToS under a creative commons sharealike license, so they may be a good template for you to base yours on. I used it as a template for my startup, and it only took a couple hours of tweaking to adapt it to my purposes. In any event, it's a good resource:
http://automattic.com/privacy/