Privacy Policy

Effective date: August 21, 2026

Privet Row LLC, a Delaware limited liability company (“Privet Row”, “we”, “us”, or “our”) runs the website at privetrow.com and the Privet Row platform, the service we operate for client families. This policy explains what we collect, why we collect it, who else sees it, and what you can ask us to do about it.

The first part of this policy covers the website. The section called “Inside the Privet Row platform” describes, in plain terms, how the platform handles client information. If you are a Privet Row client, the client agreement your family signs with us contains more detailed and more protective terms; where that agreement and this page differ, the agreement controls.

What we collect on the website

Information you give us. If you fill in a contact form or book a call with us, you give us your name, your email address, and anything else you choose to write. If you book a call, you also give us the time you picked and, in most cases, your phone number or meeting link. We do not ask for financial details, account numbers, or identification numbers anywhere on this website, and you should not send them to us through it.

Information collected automatically. Like almost every website, ours records basic technical details when you visit: your IP address, the type of browser and device you are using, the pages you looked at, how long you stayed, and the site that sent you to us. We use web analytics systems such as Google Analytics to collect and summarise this.

We do not run advertising pixels on this site. We do not track you across other websites.

Why we use it

We use what you send us to reply to you, to arrange and hold the meeting you asked for, and to follow up about working together. We keep a record of that conversation in our customer relationship system so that whoever picks up the thread knows what was already discussed.

We use the automatic information to understand how many people find the site, which pages are useful, and whether anything is broken. It is a count of visits, not a profile of you.

We also use both kinds of information where we need to in order to keep the site secure, to resolve a dispute, or to meet a legal obligation.

Cookies

We use a small number of cookies. Some are strictly necessary: they make the site work and remember your choices. The rest belong to our analytics, and their only job is to tell us whether two page views came from the same visit.

You can refuse or delete cookies in your browser settings. The site still works without them; we simply stop being able to count your visit accurately.

Who else sees it

We do not sell your personal information, and we do not hand it to anyone in exchange for money or advertising value.

A short list of companies see it because they run parts of our operation for us: the provider that hosts the website, the provider that carries our email, the scheduling tool that books the call, our customer relationship system, and our analytics provider. Each of them is allowed to use your information only to do the job we hired them for.

Beyond that, we would disclose information only if the law required it, if we needed to protect someone’s safety or our legal rights, or if Privet Row were ever bought by or merged into another company, in which case your information would move with the rest of the business and this policy would keep applying until we told you otherwise.

How long we keep it

We keep enquiry and meeting records for as long as we are in contact with you and for a reasonable period afterwards, in case you come back to us. Analytics records are kept in summarised form and are not tied to your name.

You can ask us to delete what we hold about you at any time. See “Your choices” below.

How we protect it

The site is served over an encrypted connection. Access to the systems holding enquiry records is limited to the people at Privet Row who need it, and is protected by individual accounts and multi-factor sign-in.

No website can promise perfect security, and we are not going to pretend otherwise. What we can say is that this site is deliberately built not to collect sensitive information in the first place.

Inside the Privet Row platform

Privet Row provides family office administration, which means that once a family engages us we handle a great deal of genuinely sensitive information on their behalf. That relationship is governed first by the confidentiality and data protection terms in the client agreement each family signs with us, together with the specific instructions that family gives us. Those terms are more detailed and more protective than this page. What follows is the plain-language summary of how the platform itself works.

What the platform collects. Records the family or its authorised advisers provide: household and legal entity information, documents such as statements, invoices, insurance policies and tax forms, and the identifiers needed to administer tax filings. And financial account information: when a family connects a bank or card account, the connection is made through Plaid Inc. We receive account details, balances, and transaction history. We never see or store the family’s banking username or password; those are provided directly to Plaid or to the bank itself. Plaid’s handling of this information is described in the Plaid End User Privacy Policy. Families can also provide transactions by file or through their card programme.

Why we use it. To provide the service the family engaged us for: bookkeeping and spend analysis, deadlines and renewals, bill payment with the family’s own approvals, payroll administration, organising documents for the family’s accountant and other advisers, and answering the family’s questions about any of it. We do not sell client information, and we do not use it for advertising.

Who processes it. Three companies process platform data to run the service for us: Google Cloud (hosting, storage, and database), Plaid (bank connections), and Stripe (card transactions). Each may use it only to provide their service to us. Beyond that, client information is seen only by the professionals the family itself authorises, exactly to the extent the family directs, and by us where the law compels disclosure, in which case we disclose the minimum required and tell the family unless we are prohibited from doing so.

How it is protected. Every connection is encrypted. Stored data is encrypted, and the most sensitive values, such as tax identifiers and account numbers, are encrypted a second time at the application level. Access inside Privet Row is role-based, checked on every request, protected by two-step sign-in, and reviewed quarterly.

How long we keep it, and deletion. For as long as the family uses the service. When a family leaves, they can request an export of their records, and on their written request we delete their data within 30 days, with backup copies aging out within 35 days after that. Disconnecting a bank severs the connection at Plaid itself, which ends the flow of data from that bank.

Requests. Clients can raise any privacy request through their Privet Row contact or by writing to privacy@privetrow.com.

Your choices

Write to us at privacy@privetrow.com and you can ask us to:

• tell you what we hold about you,
• send you a copy of it,
• correct anything that is wrong,
• delete it, or,
• stop emailing you.

Every marketing email we send also carries an unsubscribe link, which is the fastest way to stop hearing from us.

We will answer within the time the law allows, and we will not treat you any differently for having asked.

California privacy rights

If you live in California, the California Consumer Privacy Act gives you specific rights over the personal information we hold about you.

What we have collected about you in the last twelve months. Identifiers, meaning your name, email address, phone number and IP address; internet activity, meaning the pages you viewed on our site; and the contents of any message you chose to send us. We collect it from you directly and from the automatic records described above.

Your rights. You may ask us to tell you what we have collected, where we got it, why we collected it and who we shared it with. You may ask for a copy. You may ask us to correct it or to delete it. You may ask us to limit how we use sensitive information, although we do not collect any on this website. We will not discriminate against you for exercising any of these rights.

Selling and sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the last twelve months.

How to make a request. Email privacy@privetrow.com. We will ask you for enough information to confirm you are who you say you are before we act, which for a website enquiry usually means replying from the address you originally wrote from. An authorised agent may make a request on your behalf with written permission from you.

Children

This website is meant for adults. We do not knowingly collect information from anyone under 16. If you believe a child has sent us something, write to privacy@privetrow.com and we will delete it. Inside the platform, records about household members, including minors, are provided and controlled by the responsible adults in the family.

Changes to this policy

If we change this policy we will post the new version here and update the effective date at the top. If the change is a significant one, we will say so plainly rather than quietly swapping the text.

Contact us

Email: privacy@privetrow.com