‘Being ’in control' with privacy - how do you do it?