Privacy Policy

Last updated: 2026-06-17

Information integrity requires strict boundaries. When you submit details through our forms or browse our services, we handle your corporate records with strict confidentiality to protect against security and regulatory risk. This policy explains what we collect and how we use it.

Data Controller

We isolate corporate structures. Private Gravity operates as a specialised data governance practice under its registered corporate parent, Own Digital Ltd. Records are processed under this entity's legal responsibility.

Contact: [email protected]

Information We Collect

We minimise our footprint. To protect practices from external data harvesting, we limit collection to basic contact details and the context you provide during briefings. We avoid collecting anything beyond that.

Specifically, we collect:

Contact details: your corporate name and a verified email address.
Professional and corporate context you submit in an intake or briefing request.
Any correspondence you choose to share during advisory contact.
Limited technical data, such as server logs, collected to protect our infrastructure.
Aggregate, anonymous site-usage data through PostHog, configured in cookieless mode.

How We Protect Your Data

Safety requires clinical delivery. We secure the site with edge routing that blocks automated bots before they can harvest registry links or partner profiles. These protections run without cookies or tracking.

Analytics are fully anonymised. We run site analytics without persistent device identifiers and with session recording switched off. This keeps your research private.

What We Never Do

Absolute ban on the sale, lease, or commercial distribution of personal data.
Absolute exclusion of behavioural profiling, retargeting, and marketing automation.
Complete elimination of session recorders and third-party tracking pixels.
Permanent omission of Google Analytics and consumer marketing tools.

How We Use Your Information

We process records with strict intentionality. We use the information you provide to assess practice suitability before issuing a formal Letter of Engagement. Nothing is used for any other purpose.

We use your information only to:

Assess practice suitability before executing a bespoke Letter of Engagement.
Respond directly to authorised corporate representatives where appropriate.
Maintain accurate records and the security of our systems.
Understand aggregate, anonymous site usage to improve our services.

Data Retention

Data lifespan is strictly governed. We keep your information only as long as needed to complete your audit or maintain your active engagement. Temporary diagnostic logs are cleared within twelve months.

Your Rights

You control your information. Under United Kingdom data protection law, you may request access to, correction of, or deletion of the personal data we hold about you. We act on these requests without administrative delay.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Communications

Privacy and data governance enquiries: [email protected]