Add instructions for dealing with requests that use sensitive data

[ekuw]

"how to deal with research data that may be private/confidential - what we should do/ask for what are the common approaches (like sending an empty spreadsheet with just column headings, or one or two curated/fictional rows, or doing data processing in a safe environment)"