You sure that policy is right? I don't understand the spec, nor how to read the P3P policy, but looking at http://www.w3.org/TR/P3P/ seems to indicate these might be problematic:
NOI = Web site does not collect identified data.
OUR = Recipient of the information is your company (only)
STP = The retained information will only ever be used the the currently stated purposes.
NOI = Web site does not collect identified data.
OUR = Recipient of the information is your company (only)
STP = The retained information will only ever be used the the currently stated purposes.