Our Commitment to GDPR
node-river is committed to complying with the General Data Protection Regulation (GDPR) and protecting the personal data of individuals within the European Union and the United Kingdom.
This page explains your rights under GDPR and how we fulfill our obligations as a data controller.
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: When you voluntarily provide information through contact forms or communication with us
- Contractual necessity: When processing is necessary to fulfill service agreements
- Legitimate interests: For business operations, improving services, and website functionality
- Legal obligations: When required to comply with applicable laws and regulations
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request access to the personal data we hold about you. We will provide a copy of your personal data in a commonly used electronic format.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification.
Right to Erasure
You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request that we limit how we process your personal data in certain situations, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Right to Lodge a Complaint
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority if you believe we have not complied with GDPR requirements.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the information provided below. We will respond to your request within one month, as required by GDPR.
When making a request, please provide sufficient information to help us identify you and understand the nature of your request. We may need to verify your identity before processing certain requests.
Data Protection Officer
For questions or concerns regarding data protection and GDPR compliance, you may contact us at:
Email: [email protected]
Address: 42 Kensington Park Road, London, W11 3BU, United Kingdom
Data Processing Activities
We process personal data for the following purposes:
- Responding to inquiries and providing information about our services
- Managing service delivery and client relationships
- Improving website functionality and user experience
- Analyzing website usage for business insights
- Complying with legal and regulatory requirements
Data Sharing and Transfers
We do not sell or rent personal data to third parties. We may share data with service providers who assist with business operations, but only under strict contractual obligations that ensure GDPR compliance.
If we transfer personal data outside the UK or EU, we ensure appropriate safeguards are in place as required by GDPR.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by legal obligations. Retention periods vary depending on the type of data and the purpose of processing.
When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention policy.
Security Measures
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated to maintain data security.
Updates to This Information
We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. Updated information will be posted on this page with a revised date.
Supervisory Authority
If you are not satisfied with how we have handled your personal data or your GDPR rights request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Phone: 0303 123 1113
Last Updated: September 2026