privacy rights of customers