Privacy Notice

Who is responsible

Rivonia Growth Ltd, registered in England and Wales under company number 17457969, is responsible for the personal information described in this notice. Contact hello@rivonia.co.uk about your information.

Registered office: Temple Court 108-112 Main Road, Sevenoaks, United Kingdom, TN14 6ES.

Early Demand Review requests

We collect your name, company, company website, work email, the service you want to grow and your acquisition-spend band. We use these details to assess your request, acknowledge it, notify Tonderai and contact you about a possible next step. A request does not automatically qualify your business or book a meeting.

Diagnostic requests and optional marketing

We collect your first name and work email to provide The Early Demand Diagnostic and send its download link. An optional, initially unticked checkbox records whether you also want occasional Rivonia notes. The requested Diagnostic is provided regardless of that choice.

We record the marketing choice separately, together with its wording, version and server timestamp. Requesting the Diagnostic does not itself subscribe you to promotional messages. No automated marketing sequence runs from this form.

Source information and security

With an accepted request we record the initial landing path, submission path, a source path, permitted campaign labels and a referring website’s origin where available. Unrelated URL parameters, referrer paths and referrer query strings are discarded. First-entry information is held in page memory while you navigate internally; it is not saved in a tracking cookie or browser storage.

For abuse protection, a trusted hosting-provided network address, where available, and the submitted email are converted to keyed hashes for short-lived rate limits. Raw network addresses are not written to the lead database for this purpose. Limits expire after 15 minutes for the network key and one hour for the email key. Expired records are eligible for removal on accepted requests and by the scheduled cleanup worker.

Service providers and sharing

Vercel provides hosting and application infrastructure and may process request and security logs. Neon provides database infrastructure for accepted requests, optional consent records and transactional-email jobs. Authorised Rivonia operators initially inspect these records through the database provider’s console.

Resend provides transactional email delivery and processes recipient addresses and message content. Review notifications contain the six submitted fields and permitted attribution.

We do not send form entries to website analytics or advertising trackers. The website does not load Google Analytics, Meta Pixel or non-essential advertising trackers.

International transfers

Some of our service providers may process personal information outside the United Kingdom. Where this results in a restricted international transfer, we rely on appropriate safeguards provided under applicable UK data-protection law, including recognised contractual transfer mechanisms where required.

Legal bases

Early Demand Review enquiries: we respond to requested business enquiries and, where applicable, take steps at your request before entering into a contract. We may also rely on our legitimate interests to administer and manage your enquiry.

Early Demand Diagnostic fulfilment: we provide the requested resource and administer your request based on our legitimate interests in responding to requested business interactions.

Optional marketing: we rely on your consent, which you may withdraw at any time by emailing us. Withdrawing consent does not affect fulfilment of the Diagnostic you requested.

Security, rate limiting and abuse prevention: we rely on our legitimate interests in protecting Rivonia’s website, systems and users.

Legal and compliance processing: we rely on legal obligation where applicable.

Retention

We keep Review and Diagnostic request information only for as long as reasonably necessary to respond to the request, manage appropriate follow-up and maintain business records. If a client relationship begins, relevant information may form part of the client record. We may retain information longer where needed for legal, accounting, fraud-prevention or dispute purposes. Marketing preferences are retained for as long as needed to respect and demonstrate your choices. Security and abuse-prevention records are retained only for as long as reasonably necessary for those purposes.

Email records distinguish provider acceptance, delivery, bounce and failure. Failed email jobs do not erase the accepted request. The confirmation cookie described in the Cookie Notice expires after one hour.

Your rights and contact

Depending on the circumstances and the applicable legal basis, you may ask to access or correct your information, have it erased, restrict its use, object to processing or receive a portable copy. Contact hello@rivonia.co.uk to make a request or raise a concern.

You have the right to object to processing based on legitimate interests. You can also object to or withdraw consent for direct marketing at any time.

You can also complain to the Information Commissioner’s Office.

Last updated: 17 September 2026. Read our Cookie Notice for the current browser technologies.