Last Updated: Aug 2019

What we do
The River Group Content Ltd runs regular surveys to gather feedback on our publications. As this involves the processing of personally identifiable data, we comply with the GDPR, which came into force on 25th May 2018. We are committed to the secure and compliant handling of all data held and processed by the company.

GDPR Legal Basis for Processing
The legal basis we use to collect your data is Consent. By entering your data into the survey you’re giving us your consent to use it in-line with this Privacy Policy.

Who is data shared with?
We use Survey Monkey to collect your data. You can find information on their GDPR compliance here and their Privacy Notice here. They have US-based secure data centres but are EU-US Privacy Shield compliant.

Data is securely shared internally on a need-only basis with staff who understand their responsibilities under GDPR. 

We never resell or share this data to any other party other than in the circumstances below:

  1. Where we are legally required by law to disclose your personal information.
  2. To further fraud protection and reduce the risk of fraud.

Where does the data come from?
The data we process is obtained from your entries in our online survey forms. 

Use of Your Information
We use the information that we collect to monitor the feedback you give us on our publications as well as, in some cases, fulfil any prizes offered. 

How do we protect your information?
River takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place.

Your Rights
You are entitled to see the information we hold about you. You can also request changes to be made to incorrect information. You can ask for information to be deleted or blocked if you legitimately think that we shouldn’t be processing it or are processing it incorrectly.

If you have any queries about this notice or your personal information generally, including questions about accessing your personal information or correcting it, you should contact our Data Protection Officer (details below).

Further information on your rights as a data subject can be found here  

Data Protection Officer (DPO)
If you have any queries or concerns, our DPO can be contacted on dpo@therivergroup.co.uk or by calling 0207 420 7000.

Data Retention Period
After 3 months we will delete any personally identifiable data you provide us. There may be occasions though when we may not be able to remove your data, due to legal, regulatory and contractual constraints. 

Right to complain
If you have not received a satisfactory internal response to your data enquiry, guidance from the Information Commissioner’s Office can be found here.Using Data for Further Purposes
The data kept is used for the purposes listed above.