Privacy policy

Last updated: September 2026

1. About this policy

This policy explains what personal information The Rivya Partnership Ltd collects, why we collect it, how we use and share it, how long we keep it and the rights available to you under the UK GDPR and the Data Protection Act 2018. We are the data controller for that information.

If you are a candidate or prospective candidate, please also read our GDPR candidate privacy notice, which sets out the detail specific to search and selection work.

2. Who this policy covers

• Clients and prospective clients, and their people.
• Candidates, prospective candidates, referees and referrers.
• Suppliers, partners and other professional contacts.
• Visitors to this website and recipients of our insights.

3. Information we collect

• Information you give us: name, organisation, job title, email address, telephone number, CV or career history and the details of your enquiry, including anything you submit through our contact form.
• Information we generate: engagement notes, market research, assessment records, advice and correspondence.
• Information from other sources: referrals, professional networks, client introductions and publicly available profiles.
• Technical information: IP address, device and browser type, and pages visited, as described in our cookie policy.

4. How we use your information

• To respond to enquiries and discuss whether we can help.
• To deliver our advisory and search services and our defined solutions.
• To carry out talent intelligence and market mapping for clients.
• To maintain accurate client, candidate and supplier records.
• To send insights and updates where you have asked to receive them.
• To improve this website and understand how it is used.
• To meet legal, regulatory, tax and accounting obligations, and to protect our legal rights.

5. Our lawful bases

We rely on legitimate interests to run and develop a professional advisory business, on contract to deliver engagements and take pre-contract steps, on consent for marketing and non-essential cookies, and on legal obligation where the law requires us to hold or disclose information. Where we rely on legitimate interests, we have considered the impact on you and you may object at any time.

6. Sharing your information

We share information with clients only where a candidate has agreed to be represented, and with suppliers who provide IT hosting, email, document storage, assessment and professional services under written terms. We may share information with advisers, auditors, insurers, or with authorities where the law requires it. We do not sell personal information and we do not share it for third party advertising.

7. International transfers

Some of our suppliers and clients operate outside the UK. Where information is transferred internationally we put appropriate safeguards in place, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum, together with additional protections where needed.

8. Retention

We retain personal information for as long as necessary for the purpose it was provided, and in line with our legal obligations. Enquiry records are kept for up to 24 months from our last meaningful contact, engagement and financial records for six years from the end of the engagement, and network records for as long as they remain relevant and you are content for us to hold them.

9. Security

We use reputable cloud providers, restrict access on a need to know basis, encrypt data in transit, keep devices protected and require confidentiality from everyone acting for us. No system is completely secure, so we also limit what we collect in the first place.

10. Your rights

You may request access to, correction of, or deletion of your personal information, ask us to restrict or stop processing it, object to processing based on legitimate interests, request portability, or withdraw consent. Contact us and we will respond within one month. If you remain unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.

11. Children

Our services are for organisations and professionals. We do not knowingly collect information relating to children.

12. Changes to this policy

We review this policy periodically and will update this page when it changes. Significant changes will be highlighted here with a revised date.

13. Contact us

To ask a question about this policy or exercise a right, please use our contact page. You may also want to read our terms of use and learn more about The Rivya Partnership.

[Content placeholder: registered office, company number and data protection contact to be confirmed. This policy is provided for information and is not legal advice.]