Data privacy in contracts