Privacy policy is easy enough: there are generators around that will guide you through the important bits. Most end needing common sense applied afterwards though. However I suspect that most people here are more aware than most of the issues surrounding use of private dara.
Terms is trickier. You need to weigh up the cost v the risk for your particular project. We seem to usually end up paying £5-600 with our not cheap, but very thorough solicitors. Not sure if we get a rate on that though.
If you are cribbing from others I would still write your own draft headings first. You can then compare those with others to make sure you are covering everything before starting to pinch the best bits from each one you find.