Privacy notice

Information we receive

The website enquiry form sends us your name, email address, optional company name, and project message. If you contact us by email or WhatsApp, we receive the contact details and message you choose to send through that service.

When you visit the website, Google’s Firebase services may process technical request information needed to deliver and protect the site, such as your IP address, browser and request details. The contact form’s abuse protection also temporarily uses your IP address in memory to apply a rate limit; expired entries are cleared as later requests are received.

Please do not send passwords, payment-card details, special-category data, or confidential information about other people through the general enquiry form.

Why we use it

We use enquiry details to understand and answer your request, discuss a possible project, prepare a proposal, and keep appropriate business records. We use technical information to deliver, protect, and troubleshoot the website. We do not use enquiry details for unrelated marketing or sell them.

For an enquiry, the legal basis is taking steps at your request before a contract where applicable, or our legitimate interest in responding to and managing business enquiries. We use contract and legal-obligation bases as applicable when providing paid services and keeping required records.

Services used by this website

RivCor’s website is hosted using Google Firebase Hosting. The contact form is routed to a Firebase Function running in the europe-west1 region, and submitted messages are sent using Resend. Those providers process information to host the site, protect and operate the form, and deliver the email to RivCor. Your email provider processes the message when it reaches your inbox.

If you choose to contact us through WhatsApp, WhatsApp/Meta processes that conversation under its own terms and privacy information. You can instead use the contact form or email.

International processing

Firebase Hosting serves website content through Google’s global content delivery network. The form function runs in Belgium, but Google services may process technical information in other locations under Google’s data-processing terms. Resend states that it stores customer message content and delivery logs in the United States. Resend’s data-processing terms describe the transfer safeguards it uses, including Standard Contractual Clauses and the EU-U.S. Data Privacy Framework where applicable.

Provider locations and safeguards for systems built or hosted for a client are assessed separately and set out in that project’s proposal and, where needed, data-processing agreement. This notice does not describe personal data processed inside a client’s system.

More information: Resend GDPR information and Google Cloud data-processing terms.

How long we keep information

If an enquiry does not become a project, RivCor will delete it from its working email records within 12 months after the last substantive contact, unless it is needed to resolve a dispute or meet a legal obligation. Resend states that email and delivery-log data is retained for 30 days on its Free, Pro, and Scale plans; its own service retention and backup rules apply.

Project and transaction records are kept for as long as needed to deliver the work and meet legal obligations. Irish Revenue requires certain business tax records to be kept for six years. Google Cloud Logging’s default operational log bucket in the RivCor project is configured for 30 days; provider-managed technical records may follow their own service retention rules.

More information: Irish Revenue record-keeping guidance and Resend security and retention information.

Cookies and similar technologies

The current website code does not include analytics or advertising trackers. Google or other providers may use technical technologies that are strictly necessary to deliver or secure a service you request. If RivCor adds analytics, advertising, or other non-essential tracking, we will update this notice and obtain consent where required before it runs.

Your rights and contact

Depending on the circumstances, you may ask to access or correct your personal information, request its deletion, restrict or object to some processing, or receive information you provided in a portable format. You can make a request at hello@rivcor.com. You may also complain to Ireland’s Data Protection Commission.