Legal
Privacy Policy
Last updated: 1 May 2026
1. Who We Are
This Privacy Policy explains how DoublePortrait Capital & Labs ("DoublePortrait", "we", "us", or "our") collects, uses, and protects personal data when you visit www.doubleportrait.com (the "Site").
DoublePortrait is the data controller for the purposes of UK data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
If you have questions about how we handle your data, contact us at: privacy@doubleportrait.com
2. What Data We Collect
We collect two categories of personal data through the Site:
Enquiry data — when you contact us directly:
- your name;
- your email address;
- any other information you choose to include in your message.
Analytics data — automatically collected when you visit the Site:
- IP address (anonymised where technically feasible);
- browser type and version;
- device type and operating system;
- pages visited and time spent on each page;
- referring URL;
- approximate geographic location derived from IP address.
We do not collect any special category data (such as health, financial, or political information), and we do not knowingly collect data from individuals under the age of 18.
3. How We Collect It
Enquiry data is collected when you send us an email or submit a contact form on the Site.
Analytics data is collected automatically via PostHog, a product analytics platform. PostHog processes usage data on our behalf to help us understand how visitors interact with the Site. PostHog may set cookies or use similar technologies. For more information about PostHog's data practices, see their privacy policy at posthog.com/privacy.
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
Legitimate interests (Article 6(1)(f)) — for analytics data, to understand how the Site is used and to improve it. We have assessed that this interest is not overridden by your rights, given the limited and non-intrusive nature of the data collected.
Legitimate interests (Article 6(1)(f)) — for enquiry data, to respond to your message and manage our communications.
You may object to processing based on legitimate interests at any time (see Section 7).
5. How We Use Your Data
We use the data we collect solely for the following purposes:
- to respond to enquiries you send us;
- to analyse Site usage patterns and improve the Site's content and performance;
- to maintain the security and integrity of the Site;
- to comply with legal obligations where applicable.
We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for marketing purposes.
6. Third-Party Data Processors
We share data with the following third-party processors, each engaged under appropriate data processing terms:
PostHog — product analytics. Processes anonymised usage data on our behalf. Data may be stored on servers within the EU/EEA or UK. See posthog.com/privacy.
We do not transfer personal data to countries outside the UK or EEA without ensuring appropriate safeguards are in place.
7. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access — to request a copy of the data we hold about you.
- Right to rectification — to ask us to correct inaccurate or incomplete data.
- Right to erasure — to request deletion of your data in certain circumstances.
- Right to restriction — to ask us to limit how we use your data.
- Right to object — to object to processing based on legitimate interests.
- Right to data portability — to receive your data in a structured, machine-readable format.
To exercise any of these rights, contact us at privacy@doubleportrait.com. We will respond within one calendar month. We may ask you to verify your identity before acting on a request.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.
8. Data Retention
Enquiry data: we retain correspondence for as long as reasonably necessary to manage the relationship or comply with legal obligations, and no longer than three years from the date of last contact, unless there is an ongoing legitimate reason to retain it further.
Analytics data: aggregated and anonymised analytics data may be retained indefinitely. Any personally identifiable components (such as raw IP addresses) are retained in accordance with PostHog's default retention settings, which you can review at posthog.com/privacy.
9. Cookies
The Site uses cookies and similar tracking technologies, primarily through PostHog, to collect analytics data as described above. These are functional and analytics cookies only — we do not use advertising or targeting cookies.
You can control or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of some parts of the Site. Where required by law, we will seek your consent before placing non-essential cookies.
10. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically. Continued use of the Site after any update constitutes acceptance of the revised policy.
12. Contact
For any questions, requests, or complaints relating to this Privacy Policy or our data practices please contact us: privacy@doubleportrait.com