Privacy policy.
Draft written by AI on October 29, 2026. A lawyer must review this page before launch.
- Document
- Privacy policy
- Last updated
- October 29, 2026
- Covers
- riviot.com
- Applies in
- The US, the UK and Ireland
This policy explains what personal data Riviot collects, why we use it, who we share it with and the rights you have over it.
Who we are.
Riviot places tested network and data center engineers with enterprises and integrators, and runs deployments end to end, in the United States, the UK and Ireland. We run riviot.com, Vio (the application engineers use to take our assessments) and a platform where clients post requirements and manage their engineers.
Riviot is the controller of the personal data described in this policy. That means we decide why and how it is used. We have offices in New York, US and Manchester, UK.
Where the law requires it, Riviot has a representative in the European Union for data protection matters, who can be reached through the contact details at the end of this policy.
What this policy covers.
This policy explains how we collect and use personal data when you visit riviot.com, contact us, request talent, ask about professional services, or apply to join our network. It also covers the data we use when we assess engineers and introduce them to clients.
Vio and the client platform may give you more detail when you use them. Where they do, that notice adds to this one.
If you work for one of our clients, your employer's own policies also apply to what they share with us.
The information we collect.
Information you give us
- Requests for talent and project inquiries: your name, work email, company, job title, and the details of your project, such as its type, market, start date, duration, roles, certifications and site requirements.
- Contact messages: your name, email address, the subject and your message.
- Applications from engineers: your name, email address, role and market to start, then in Vio your work history, certifications, skills, location, availability, rates and anything else you choose to tell us.
- Assessments: your answers and results in Vio, the scores that make up your scorecard, and our reviewers' notes.
Information from other sources
- References you name, who tell us about your work.
- Certification bodies, when we check a certification you have declared.
- Public professional profiles, such as LinkedIn, when you apply or when we contact you about a role.
- Clients, who tell us how a placement went.
Background checks
Some client projects require a background check or a security clearance. We only carry one out when a project needs it and the law allows it, and we tell you first, including who runs the check.
Information collected automatically
When you visit riviot.com, our hosting provider records technical data such as your IP address, browser type, the pages you request and the time of each request. We use it to deliver the site and keep it secure.
We count visits with Cloudflare Web Analytics: which pages are viewed, where visitors come from and how fast pages load. It sets no cookies, stores nothing on your device and does not build a profile of you. The site does not use analytics or advertising cookies. Our cookie policy lists what the site stores in your browser and what we would only add with your consent.
The tools on this site, such as the rate calculators, run in your browser. What you type into them is not sent to us.
How we use it, and our legal bases.
Under UK and EU data protection law we need a legal basis for each use of your personal data. These are the uses and the bases we rely on.
| Purpose | Data | Legal basis |
|---|---|---|
| Answering requests and inquiries | Contact details, project details, messages | Our legitimate interest in responding to business inquiries, or steps you ask for before a contract |
| Assessing engineers and building scorecards | Application details, assessment answers and results, reviewers' notes | Steps you ask for before a contract, and our legitimate interest in placing engineers who can do the work |
| Introducing engineers to clients | Your scorecard and one-page profile | Steps you ask for before a contract, with your agreement before each introduction |
| Running placements and projects | Contracts, timesheets, invoices, payment details | Performing our contract with you, and our legal obligations |
| Background checks and right to work | Identity documents, check results | Our legal obligations, or your explicit consent where the law requires it |
| Keeping the site and our systems secure | Technical data | Our legitimate interest in protecting our services |
| Sending news about Riviot | Your email address | Your consent, which you can withdraw at any time |
| Analytics and marketing cookies, if we add them | Device and usage data | Your consent |
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for that assessment.
Scorecards and automated decisions.
Vio scores the assessments you take and produces your scorecard. A member of our team reviews each result before we decide whether to admit you to the network, and before we put you forward for a role. We do not make decisions that have a legal or similarly significant effect on you by automated means alone.
You can ask how your score was reached, give your point of view, and ask for a person to look at a result again.
Who we share it with.
We do not sell your personal data. We share it only where we need to.
- Clients, when we introduce you for a role. We share your scorecard and profile, and we keep your contact details back until you agree to the introduction.
- Engineers, who see the client's name and the project when we offer them a role.
- Service providers who work for us under contract and only on our instructions: our website host (Cloudflare, which also runs the check that a form was sent by a person), our email provider (Resend, which delivers form notifications and your receipt), Microsoft (Microsoft 365, where form submissions are recorded), the agency that manages our website enquiries, the host of our platform (Vercel), and providers of data storage and payroll.
- Professional advisers, such as lawyers, accountants and insurers.
- Authorities, where the law requires it, or to protect our rights or someone's safety.
- A buyer or investor, if Riviot is sold or reorganized, under the same protections as this policy.
International transfers.
We work in the United States, the UK and Ireland, so your data may be used in a country other than the one you live in.
When we move personal data out of the UK or the European Economic Area, we protect it with an adequacy decision, the EU-US Data Privacy Framework and its UK Extension where the recipient is certified, or the contractual clauses approved for the purpose (the UK International Data Transfer Agreement or Addendum, and the EU Standard Contractual Clauses). You can ask us for a copy of the safeguards we use.
How long we keep it.
We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires, and then delete or anonymize it.
| Data | How long |
|---|---|
| Inquiries that do not lead to work | While the conversation is active, then for a short period in case you come back to us |
| Engineer applications and scorecards | While you are in the network, and for a set period after you leave or ask us to remove you |
| Applications that are not admitted | For a set period, so you can reapply and we can explain the result |
| Contracts, timesheets and invoices | For as long as tax and employment law requires |
| Server logs | For a short period, for security |
How we protect it.
We use technical and organizational measures to protect personal data, including encryption in transit, access limited to the people who need it, and contracts that hold our service providers to the same standard. No system is perfectly secure. If a breach affects you, we will tell you and the regulator as the law requires.
Your rights in the UK, Ireland and the EU.
Under UK GDPR, the Data Protection Act 2018 and the EU GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where we no longer have a reason to keep it;
- restrict how we use it while a concern is looked into;
- object to our use of it where we rely on legitimate interests, and to direct marketing at any time;
- receive the data you gave us in a portable format;
- withdraw your consent at any time, where we rely on it.
We answer within one month. We may need to confirm your identity first. There is no fee in most cases.
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office in the UK, the Data Protection Commission in Ireland, or the regulator in the EU country where you live or work.
Your rights in the United States.
If you live in California or another US state with a consumer privacy law, such as Colorado, Connecticut, Virginia or Texas, you may have the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- correct inaccurate personal information;
- delete personal information we hold about you;
- opt out of the sale or sharing of personal information, and of targeted advertising;
- limit the use of sensitive personal information;
- not be treated differently for using these rights.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. If that ever changes, we will update this policy and give you a way to opt out first.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale or sharing of your personal information, and marketing cookies stay off.
What we collect, in the terms of California law
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, email address, IP address | You, our host |
| Professional or employment information | Work history, certifications, rates, scorecards | You, Vio, references |
| Commercial information | Requests, contracts, invoices | You, clients |
| Internet activity | Pages requested on riviot.com | Our host |
| Sensitive personal information | Identity documents and check results, only where a project needs them | You, background check providers |
To use these rights, contact us using the details below. We will confirm your identity before we act, and we answer within 45 days. You can ask someone to act for you as an authorized agent, with your signed permission. If we decline your request, you can appeal by replying to our answer.
Children.
Our site and services are for adults. We do not knowingly collect personal data from anyone under 18. If you think we have, contact us and we will delete it.
Changes to this policy.
We will update this policy when the way we use personal data changes. The date at the top of the page shows when it last changed. If a change is significant, we will tell you before it takes effect.
Contact us.
For any question about this policy or your personal data, or to use your rights, write to us through our contact page and say that your message is about privacy.
Riviot has offices in New York, US and Manchester, UK.
This page is a placeholder before launch. The live version is written for both the UK and the US, names the data controller and legal entities, and is reviewed by a lawyer before publication.
Forms on this site store nothing here. Submissions are validated and passed to Riviot's form backend and platform, where the retention period and your rights are set out in full.