Thanks for posting that Todd!
I ended up using this code and it works as a popup in the same window. It goes in the same places Todd mentioned
I accept the (<a onclick="newwindow=window.open('/path to terms-conditions.html here','pop','width=820,height=870, resizable, scrollbars' );return false" href="#">Terms & Conditions</a>) & (<a onclick="newwindow=window.open('/path to terms-conditions.html here privacy.htm here','pop','width=820,height=870, resizable, scrollbars' );return false" href="#">Privacy Statement</a>)
I use the absolute server path instead of the URL because it allows me to use the database on my development server. Once done I move to production and it still works.
Hope this helps someone