Privacy Policy

Privacy Notice

Last updated: 11 September 2026

Who we are

RVM Global Ltd is the controller responsible for the personal information described in this notice.

RVM Global Ltd
Company number: 16947364
Registered office: Laneside, Forest in Teesdale, Barnard Castle, England, DL12 0XN
Email: enquiries@rvmglobal.co.uk
Website: www.rvmglobal.co.uk

This notice explains how we collect, use, store and protect information provided through our website, online assessments, event forms, enquiries, consultancy and training activities.

Information we collect

Depending on how you interact with us, we may collect:

• Your name, work email address, organisation, role and contact details.

• Information submitted through enquiries, event lead forms or requests for services.

• Responses to organisational assessments, surveys or diagnostic tools.

• Your preferences, including whether you have asked to receive marketing communications.

• Information needed to manage consultancy, training, contracts, invoices and business relationships.

• Technical information such as submission time, device or browser information, IP address and security logs where collected by our website or form providers.

Our trauma-informed readiness snapshot does not ask for information about your personal trauma, health or mental health. Please do not submit this type of information through the assessment or general enquiry forms.

How we use information and our lawful bases

We use personal information to:

• Respond to enquiries and requests for information.

• Send a result summary or respond to a request for a readiness conversation.

• Deliver and manage consultancy, training and other agreed services.

• Administer event contacts and agreed follow-up.

• Operate, secure, evaluate and improve our website, assessments and services.

• Maintain appropriate business, contractual and financial records.

• Send occasional insights and updates where separate marketing permission has been given.

• Meet legal, regulatory, safeguarding or professional obligations.

Our lawful bases may include:

• Consent, including for optional electronic marketing.

• Contract, where processing is necessary to provide an agreed service or take steps at your request before entering a contract.

• Legitimate interests, including responding to professional enquiries, operating and improving our services, protecting our systems and maintaining proportionate business records.

• Legal obligation, where information must be retained or disclosed to meet applicable law.

Where we rely on legitimate interests, we consider whether our use is necessary, proportionate and reasonably expected and whether your rights override those interests.

Readiness assessments and diagnostic tools

Our readiness tools use answers supplied by respondents to calculate an indicative organisational result, profile, strongest areas, priority areas and suggested actions.

The result is an automated interpretation of the submitted answers. It is not a formal organisational maturity rating, clinical assessment, regulatory assurance decision or decision about an individual. It does not produce legal or similarly significant effects.

If you choose to finish without sharing your details, RVM Global does not ask for your name, email address or organisation. The form provider may still process limited technical and security information associated with the submission.

If you request an emailed summary or conversation, the contact details you provide will be connected with your result only for the requested follow-up and related record-keeping.

Marketing

Marketing permission is separate from permission to provide a requested result or respond to an enquiry.

We will send occasional RVM Global insights and updates only where you have selected the optional marketing consent or where another lawful marketing route applies.

You can withdraw marketing consent at any time by emailing enquiries@rvmglobal.co.uk or using the unsubscribe option in a message. Withdrawing marketing consent does not affect a requested service or the lawfulness of earlier processing.

Who we share information with

We may use trusted suppliers that provide:

• Website hosting and technical services, including Hostinger.

• Online forms and assessment processing, including Jotform.

• Business email, communications and document storage.

• Accounting, payment and administrative services.

• Professional, legal, insurance or regulatory support.

These suppliers may process information only for the relevant service and under appropriate contractual and security arrangements.

We may also disclose information where required by law, to protect legal rights, or to address an immediate safety, safeguarding or security concern.

We do not sell personal information.

International processing

Some service providers may process or store information outside the United Kingdom.

Where this occurs, we use an applicable UK adequacy regulation or appropriate contractual and organisational safeguards, such as the UK International Data Transfer Agreement or UK Addendum, where required.

How long we keep information

We retain:

• Assessment, event-lead and general enquiry records for up to 24 months from submission or the last meaningful contact.

• Contact details connected with a requested result or conversation for up to 24 months from the last meaningful contact.

• Marketing records until consent is withdrawn or following a periodic review of continued engagement. We may retain a limited suppression record so that an opt-out continues to be respected.

• Client, contractual, financial and taxation records for up to six years after the relevant relationship or financial period, where required.

• Technical and security records for the period reasonably required to protect our services and investigate incidents.

Information may be deleted sooner when it is no longer needed. It may be retained longer where required by law, a dispute, safeguarding need or legal claim.

Security

We use proportionate organisational and technical safeguards intended to protect information from loss, misuse, unauthorised access, alteration or disclosure.

Access is limited to people and suppliers who need the information for an authorised purpose.

No internet-based service is completely secure, but suspected data incidents will be assessed and managed in accordance with applicable requirements.

Your rights

Depending on the circumstances and lawful basis, you may have the right to:

• Ask for access to your personal information.

• Ask us to correct inaccurate or incomplete information.

• Ask us to erase information.

• Ask us to restrict how information is used.

• Object to processing based on legitimate interests or direct marketing.

• Receive certain information in a portable format.

• Withdraw consent at any time where processing relies on consent.

The right to object to direct marketing is absolute.

To exercise a right, contact enquiries@rvmglobal.co.uk. We may need to confirm your identity before responding.

Complaints

Please contact us first if you have a concern so that we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office:

Website: www.ico.org.uk
Telephone: 0303 123 1113

Cookies and website information

Our website may use essential cookies needed for security and operation. Where non-essential analytics or marketing cookies are used, they will be managed through the appropriate consent controls.

Your browser settings may also allow you to restrict or remove cookies, although this may affect some website functions.

Changes to this notice

We may update this notice when our services, suppliers or legal obligations change. The latest version and revision date will be published on our website.

Contact us

For privacy questions, requests or concerns, contact:

enquiries@rvmglobal.co.uk