Privacy Policy

Last update: 13/09/2019

We will deal with your Personal Data in compliance with the current UK & EU data protection legislation, which includes the EU General Data Protection Regulation (GDPR) which came into force on 25th May 2018. Please note this applies only to services which we operate and control and not to other companies’ or organisations’ websites to which we may link. For such external services or sites please see their Privacy Policies to understand how they might be handling your data.

Our Purpose for Collecting and Processing Personal Data

We collect and process data in order to service the clients and contracts on which we work, carry out essential business tasks such as communication and invoicing, send appropriate and relevant information relating to our work where we deal it is necessary or of interest and to manage the operations external companies and contractors. In some cases, we may also be required to hold certain information for legal compliance, law enforcement or contractual purposes.

Legal Basis

Personal data used for the purposes above is processed under the basis of legitimate interest; compliance with the law; and to fulfil contractual obligations. We do not carry out direct to consumer marketing activities which require an opt-in, but we seek to obtain this whenever possible for business to business marketing.

What Data We Collect

We hold contact information for business customers, clients, partners, suppliers and contractors.

Use of personal Data for Marketing Communications

Marketing communications are primarily directed to business contacts. In circumstance where we may conduct direct to consumer marketing we will update the information in this privacy policy.

Who Controls or Has Access to the Data?

Personal data may be accessed and processed by all staff at RivingtonHark. The use of personal data will remain under the control of RivingtonHark at all times operating as the Data Controller. RivingtonHark do not sell your data to other companies.

Personal data that might be collected via our corporate or project websites which we manage may be accessible by our marketing and design agency Of Colour and Code Ltd.

In compliance with the law we may be obligated to disclose Data about you to a law enforcement agency or by a court order.

Personal Data is held and processed only within the EU.

Data subjects have various rights in relation to accessing and amending the data companies hold on them under GDPR. More information on how to do this can be found later in this document.

Your personal data is not shared with other companies for their own purposes unless specifically stated at the time of collection and you have given your permission.

Retention Period & Criteria

We only keep personal data for as long as necessary for the purpose for which it was collected or to comply with legal, contractual or law enforcement purposes.


We endeavour to take all reasonable steps to protect your personal information. However, we cannot guarantee the security of any data you disclose online. You accept the inherent security risks of providing information and dealing online over the Internet and will not hold us responsible for any breach of security unless this is due to our negligence or wilful default.

Data Subject’s Rights

Data subjects have a number of rights which we recognise and uphold. These include: The right to be informed about how we collect and process your personal data which is detailed in this document; The right to access this information; The right to rectify or erase data; The right to restrict the processing of data; The right to data portability; The right to object; and, rights relating to automated decision making and profiling.

How do I access or amend my data?

For any correspondence relating to personal data please contact us on 020 7182 1840, write to us at 13 Charles II Street, London, SW1Y 4QU or email

How do I remove myself from your mailing list?

Please email with the word ‘remove’ in the subject line and the email address that you wish to be removed within the email. Please note that it may take up to 28 days to action your request.

Opting out of marketing communications will be honoured unless a later opt-in is received for the same contact details.

If you would like to request we delete your data completely please email us at

Changes to this Privacy Statement

We will occasionally update this Privacy Statement and when we do, we will also revise the “last updated” date at the top of this document. We will obtain your consent for any updates to this Privacy Statement that materially expand the sharing or use of your personal information in ways not disclosed in this Privacy Statement at the time of collection.

Identity and Contact Details

Data Controller: RivingtonHark, registered in England & Wales No. 3261496. Registered Office: 1st Floor, 24-25 New Bond Street, London W1S 2RR.

For any correspondence relating to personal data please contact us on 020 7182 1840, write to us at 13 Charles II Street, London, SW1Y 4QU or email


This site does not use cookies to collect any personal information about you. We will only use the cookies provide us with anonymous statistics via Google Analytics.