Privacy Policy

This Privacy Policy outlines how Rivière Solutions, also known as Bespoke Rivière, ("we", "us", or "our") collects, uses, discloses, and protects your personal information. We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all individuals who interact with us, including clients for whom we plan events, attendees of events we organise on behalf of our clients, and attendees and ticket purchasers for events we host ourselves.

1. Who We Are

Rivière Solutions is an events consultancy company providing end-to-end event planning services and also hosting our own ticketed events. For any data protection queries, please contact us info@rivieresolutions.com

2. The Information We Collect

We may collect and process the following types of personal information:

For our event planning clients:
- Contact details (name, email address, phone number, business address).
- Organisational information.
- Payment and billing information.
- Event-specific requirements which may contain personal data of your attendees.
For attendees of events we plan on behalf of our clients:
- We may process your personal data as a data processor on behalf of our clients (the data controller). This can include your name, email address, dietary requirements, accessibility needs, and other information necessary for the event. Please refer to the privacy policy of the event organiser (our client) for full details.
For attendees and ticket purchasers of our own "Bespoke Rivière" events:
- Identity Data: Full name, title.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Payment card details (processed securely by our third-party payment processors).
- Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
- Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.
- Special Category Data: We may need to collect information about your dietary requirements or health-related accessibility needs. We will only collect this data with your explicit consent.

3. How We Use Your Information and Our Lawful Basis for Processing

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

We will only use your personal data when the law allows us to. We have set out below a description of the ways we plan to use your personal data, and which of the legal bases we rely on to do so.

To manage our client relationships: We process contact, organisational, and financial data to manage our relationship with our event planning clients. Our lawful basis for this processing is the performance of a contract with you.
To deliver client events: When planning and delivering events for our clients, we process personal data as instructed by them. In this capacity, we act as a data processor, and the lawful basis for processing is determined by our client, the data controller.
To process ticket purchases: For our own Bespoke Rivière events, we process your identity, contact, financial, and transaction data to manage your ticket purchase. This is necessary for the performance of a contract with you.
To manage event attendance: To manage your attendance at our Bespoke Rivière events (for example, sending event details and managing check-in), we process your identity and contact data. The lawful basis for this is the performance of a contract with you.
To accommodate specific needs: For our Bespoke Rivière events, we may need to process special category data regarding your dietary or accessibility requirements. We will only do this with your explicit consent.
To keep you informed: We process identity, contact, profile, and marketing and communications data to manage our relationship with you, which includes notifying you about changes to our terms or privacy policy. This is necessary for the performance of a contract and for our legitimate interests in keeping our records updated.
To protect our business and website: We process identity, contact, and technical data to administer and protect our business and website. This includes troubleshooting, data analysis, system maintenance, and security. This is necessary for our legitimate interests in running our business, providing IT services, and ensuring network security.
To improve our marketing and advertising: To deliver relevant website content and advertising to you and to measure its effectiveness, we process identity, contact, profile, usage, marketing, and technical data. This is necessary for our legitimate interests to grow our business and inform our marketing strategy.
For data analytics: We use technical and usage data to improve our website, services, marketing, and customer relationships. This is necessary for our legitimate interests to keep our website relevant, develop our business, and define our customer base.
To provide recommendations: We may use your identity, contact, technical, usage, and profile data to make suggestions and recommendations to you about services that may be of interest. This is based on our legitimate interests in developing our services and growing our business. You have the right to opt-out of these marketing communications at any time.

4. Data Sharing and Disclosure

We will not share your personal information with any third parties for them to use for their own marketing purposes.

We may have to share your personal data with the parties set out below for the purposes set out in the table in section 3:

Service providers acting as processors who provide IT and system administration services.
Professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities in certain circumstances.
Third-party payment processors who securely handle your payment information.
For our own Bespoke Rivière events, we may share attendee lists with event partners or sponsors, but only where you have given your explicit consent to do so.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Rivière Solutions, our customers, or others.

When we act as a data processor for our clients' events, we will only share the personal data of attendees as instructed by our client (the data controller).

5. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing of your personal data.
Request the transfer of your personal data.
Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact our Data Protection Officer.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

8. Use of Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

9. Changes to this Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Effective Date" and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

10. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at info@rivieresolutions.com

You can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how we have used your data.

The ICO’s address: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk

Effective Date: 01 July 2025