Last updated: September 2025

At NodeRiver Ltd (“NodeRiver”, “we”, “us”), we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information in compliance with the UK GDPR, EU GDPR, and other applicable data protection laws.

1. Who We Are

NodeRiver Ltd provides consultancy services at the intersection of brand, AI, and governance.

If you have questions about this policy or your data, contact us at: info@noderiver.ai

2. Data We Collect

We may collect the following information when you interact with our site, services, or resources:

• Name, email address, company, and role (via forms, sign-ups, or downloads).

• Information you provide during free sessions or workshops.

• Technical data from cookies and analytics (see Section 6).

3. How We Use Your Data

We use your personal data to:

• Deliver requested resources (e.g., white papers, downloads).

• Provide free sessions or follow up once after a resource request.

• Send occasional insights and updates if you have opted in.

• Improve our website and services.

We will not use your data for purposes beyond those stated without your consent.

4. Legal Basis for Processing

We rely on:

• Contract / Legitimate Interest: To deliver requested resources and provide a one-time follow-up.

• Consent: For ongoing marketing emails and newsletters.

5. Sharing Your Data

We only share your data with trusted providers who help us deliver our services, such as:

• Squarespace (website hosting + email campaigns)

• Google Workspace / Drive (data storage, if applicable)

All providers comply with GDPR or equivalent safeguards. We never sell or trade your personal information.

6. Cookies & Tracking

We use cookies to run our site and understand visitor behaviour.

• Essential cookies are required for the site to function.

• Non-essential cookies (such as analytics) are only set with your consent via our cookie banner.

• You can withdraw or manage your cookie preferences at any time.

7. Data Retention

We only keep your personal data for as long as necessary:

• Resource requests: up to 12 months unless you opt in for updates.

• Marketing subscribers: until you unsubscribe (unsubscribe links are in every email).

8. Your Rights

You have the right to:

• Access the data we hold about you.

• Request correction or deletion.

• Withdraw consent at any time.

• Object to processing or request data portability.

To exercise your rights, email us at info@noderiver.ai.

9. Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with a new “last updated” date.