Legal
Privacy Policy
This policy explains how Riverstone Holdings handles personal data collected through riverstoneholdings.digital. The operator of this website is Riverstone Holdings, a UK app and game development studio based in London.
This document covers the website only. Data handled inside a client engagement is governed by the contract in place for that project.
Collection
What we collect
Two situations on this site produce personal data: the contact form, and the records any web server keeps of the visits it answers.
We keep the list short on purpose. Anything we do not need to answer an enquiry is something we would rather not hold.
From the contact form
- Your name and your email address, so a reply has somewhere to go.
- The content of your message. Files you choose to attach are stored with it.
- Nothing else is required, and no field is added to build a profile of you.
From server logs
- IP address, browser type, referring page, and timestamp.
- Written automatically by the web server as each page is served.
- No cookies are used to track you across other websites.
Why we collect it
Contact form data is collected so we can reply to your enquiry and, if a project follows, so we can keep a record of the initial brief. The legal basis is your consent and the legitimate interest of responding to a business enquiry.
Server log data is collected for security and reliability purposes. It helps us identify abusive traffic, diagnose faults, and keep the site running. The legal basis is our legitimate interest in operating the website.
We do not use website data for marketing, profiling, or automated decision-making.
Retention
How long we keep it
Contact form submissions are kept for as long as needed to respond to the enquiry and, if a project follows, for the duration of that project plus a reasonable retention period for our records.
Enquiries that do not lead to a project are deleted within twelve months. Server logs are kept for a shorter period, typically ninety days, and are then deleted or aggregated.
Sharing
Who we share it with
We do not sell personal data and we do not share it with third parties for marketing purposes.
Limited sharing can occur with service providers who help us run the site, such as our hosting provider. Those providers process data on our instructions and under contract. If we are required by law to disclose data, we will do so only to the extent legally required.
Rights
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request deletion, to restrict processing, and to object to processing based on legitimate interests. You also have the right to lodge a complaint with the Information Commissioner's Office.
- 01 Access the personal data we hold about you.
- 02 Request correction of inaccurate data.
- 03 Request deletion of your data.
- 04 Restrict processing, or object to processing based on legitimate interests.
- 05 Lodge a complaint with the Information Commissioner's Office.
To exercise any of these rights, email [email protected]. We will respond within one month. If we need longer, we will explain why.
Cookies
Cookies and similar technologies
This site uses a small number of cookies and similar technologies necessary for it to function. Details of what they are and how to control them sit in the cookie policy, which is linked from the footer of every page.
You can also control cookies through your browser settings. Disabling essential cookies may affect how parts of the site work.
Security
Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. These include encryption in transit, access controls, and regular reviews of who holds access to the studio mailbox.
No method of transmission over the internet is entirely secure, and we cannot promise that data will never be intercepted. We will notify affected individuals and the relevant authority if a breach occurs and the law requires it.
Updates
Changes to this policy
We may update this policy from time to time to reflect changes in the law or in how we operate the site. The current version is always the one published at this URL. Material changes will be noted on this page.
If you have questions about this policy, email [email protected].
Get in touch
Questions about your data? Ask us directly.
The studio reads its own mailbox. Whether the question concerns a submitted enquiry, a request under UK data protection law, or something this page has not answered, writing to us is the fastest route.