Legal & Privacy
Privacy, discretion and the information you share with us.
This policy reflects the current website. Items marked “To be confirmed” identify information still needed to complete the notice.
Privacy Policy
Gravia Advisory is committed to respecting privacy and handling personal information with care, discretion and a clear purpose. This policy explains the current contact experience and the principles that apply when you communicate with us.
The website’s enquiry form is not yet connected to a delivery service. Information entered into it is not currently submitted to Gravia Advisory. You can contact us directly by email.
To be confirmed: the full legal identity of the data controller behind Gravia Advisory and the contact details required to identify that controller. “Gravia Advisory” is the name used on this website, not a confirmed legal entity name.
Information We Collect
The Start a Conversation form provides fields for your full name, company, email address, service of interest and the contents of your message. At present, these entries remain in the open page; the form does not send them or save them in browser storage. They remain visible if you close and reopen the contact view during the same visit.
If you email us directly, your message may contain those details and any other information you choose to provide. Please include only information relevant to your enquiry and avoid unnecessary sensitive personal data.
How We Use Your Information
Information received through a direct enquiry is used to understand the decision, investment or context you are assessing, review your request, respond to you and continue communications directly related to that request.
There is no mailing-list subscription or automated marketing workflow implemented in the current website. This policy will be updated before a future form-delivery service introduces additional processing.
Legal Basis for Processing
Depending on the enquiry, processing may be necessary to take steps at your request before entering into a contract, or based on a legitimate interest in responding to relevant business enquiries, subject to your rights and interests. Legal obligations may also require specific processing. Where consent is the applicable basis, it must be obtained separately and may be withdrawn without affecting prior lawful processing.
To be confirmed: the controller’s applicable basis for each actual processing activity, including the assessment of any legitimate interest. Submitting an enquiry is not blanket consent to unrelated processing.
Data Retention
Personal information should be retained only for as long as needed to address the enquiry, conduct related communications and meet applicable legal obligations. Once it is no longer needed, it should be deleted or anonymised as appropriate.
To be confirmed: the operational retention and deletion rules for received emails and any future form submissions. No fixed retention period has been confirmed.
Data Sharing and Service Providers
Technology providers needed to operate a website or handle email may process personal information as part of those services. Any such processing must be assessed against its purpose, the provider’s role and the appropriate contractual and confidentiality requirements. Information may also need to be disclosed where required by applicable law.
No form-delivery provider has been configured. This policy does not identify any unconfirmed email, analytics or other service provider.
To be confirmed: the relevant service-provider roles, categories of data processed, recipients and contractual arrangements for website delivery, access controls and email.
International Data Transfers
The locations in which relevant providers process data, including any remote access, have not yet been verified for this policy. No statement is therefore made that transfers outside the European Economic Area either occur or do not occur.
To be confirmed: whether any relevant international transfer occurs and, if so, its destination, applicable legal mechanism and how information about safeguards can be obtained.
Your Rights
Subject to the conditions and exceptions in the GDPR, you may request:
- Access to your personal data.
- Correction of inaccurate or incomplete data.
- Erasure of your data.
- Restriction of processing.
- Objection to processing where applicable.
- Data portability where applicable.
Where processing relies on consent, you may withdraw that consent. To make a request, use the contact email below. Proportionate information may be requested to verify your identity.
You may also complain to the competent supervisory authority, including the Portuguese Comissão Nacional de Proteção de Dados (CNPD), or the authority in the EU Member State of your habitual residence, place of work or the alleged infringement.
Cookies and Similar Technologies
The current website code does not implement analytics tools, advertising trackers, tracking pixels or cookies. It does not use local storage or session storage to retain form entries. Interactive elements keep their temporary state within the open page.
This description concerns the website code itself. It is not a claim that the infrastructure delivering or controlling access to the site uses no cookies or similar technologies.
To be confirmed: any cookies or similar technologies introduced by the delivery or access infrastructure, including their purposes and duration. Any future non-essential tracking must be assessed and disclosed before activation.
Security and Confidentiality
Gravia Advisory is committed to treating enquiries discreetly and applying security and confidentiality measures appropriate to the information and the risks involved. Access to enquiry information should be limited to those who need it to respond or meet applicable obligations.
No website or communication method can guarantee absolute security. Please avoid sending highly sensitive information through an initial enquiry. Specific security controls and provider arrangements remain subject to operational verification.
Changes to This Policy
This policy may be updated to reflect changes to the website, its contact services, confirmed operational arrangements or applicable requirements. The date below identifies the latest update.
Last updated: .