Increasingly, companies hold more and more data about their customers. This data is seen as useful for the company, although often customers do not wish to share their personal data. Methods such as P3P for verifying a company's privacy policy are available, however, they do not provide much choice to the customer, and they provide an all-or-nothing approach. We explore the privacy preference policy approach which attempts to align the privacy preferences of the individual with that of a company. We further critique this method and develop it to incorporate levels of importance and priority.