How Companies Can Fix Ambiguous Privacy Policies