Journal · Privacy by design
Discretion is not merely a promise to be quiet. It is a system that avoids collecting what it does not need.
Public pages should have a different job from private workflows. A reader can learn about standards without publishing a profile. A general question can be answered without collecting identity documents. A public record can be useful without mapping a protected location.
Minimise the public record
Collect only what is necessary for the purpose at hand. Do not use a contact form as a substitute for a secure application process, and do not turn a public content system into a shadow database of people.
Make boundaries understandable
Privacy works best when people can see where a public page ends, what a form is for, and which channel is appropriate for sensitive matters. A clear boundary is more respectful than a vague assurance.