Policy languages allow users to define in a flexible way under which conditions their data can be shared and with whom. Nonetheless policy languages are not widely used yet: one reason for this is that they are too complex to be easily exploited by common users in a profitable way. This paper describes an approach that uses (controlled) natural language in order to express policies, therefore allowing non-computer experts to easily specify, refine and understand policies.